Extracted

• • Target
    64c4ee6e57c8451dd068669b9a7431c7.exe
  • Size 1.1MB
  • SHA256 21c88bab09fd103fd1479524503789677b0a7822eb10468c20b4fba58a952490
  • MD5 64c4ee6e57c8451dd068669b9a7431c7
  • SHA1 4dc5e1e008faedf74daf5e294740771b57d065d6
  • SHA512 3eaac180e10f850b68da87053fe25e5805776f31430ac6f71a125f985c6ea4e3d6b6021c21efd53d3b1e69fb1e9fbb1af54843f1d0cf3ffec9405d381522b159
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookmodiloaderxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    trojanmodiloader

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • ModiLoader First Stage

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2