Extracted

• • Target
    439082fb8616a7ee6ce56ea3a7682080.exe
  • Size 1.3MB
  • SHA256 da5e4f1f4945b3d49a38123f8c80ac861b5ab7720efec6dc194a1e6dbec0fdc2
  • MD5 439082fb8616a7ee6ce56ea3a7682080
  • SHA1 35a687f068f783c0bbf7ac7c8ad597952f046554
  • SHA512 fb5fa3d18063a42724b75a19e00afe0808e15b56fc1c60382c8bf8efa28cf33e93f63207e28175c1c3a22bf4bbf29eb668f70e32f4a6239c40f27fa463e98729
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2