Extracted

• • Target
    file
  • Size 626KB
  • SHA256 be246c8f7d9d07567fa9618fdacf5658709a1a71f2d61e0b32e89cf9abd499da
  • MD5 1ffed920017a57a543f00f230dedb55c
  • SHA1 bf19640052f1951a7ff6eb41f9166ca384b070ce
  • SHA512 14e937677ddeb917b845750fa2c9abe0b97e201ed66506063e1bcdb3ae7ec5d6cc630a55045f288fc0fc15a6866229990a787e8666a98e5edbe1c10fd7342c78
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2