Extracted

• • Target
    New Vendor - Setup Form.exe
  • Size 317KB
  • SHA256 c79c943ee3380a0bbce2f3665c40ae1e46b0ca42effde611924b3d51d7b625be
  • MD5 d4aa2c60930c58871042259f3eca141c
  • SHA1 eb1fb16fc427e31a4ff9e9366790a589aff60488
  • SHA512 3f079507558ab0314a34b34d345733145602d77aa01806891268d86721e5aed6f99a9652e1aad153063dfe59b469add50a1c1463922b69e226305951e746e60e
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Uses the VBS compiler for execution

  • Drops desktop.ini file(s)

  • Suspicious use of SetThreadContext

  behavioral1behavioral2