Extracted

• • Target
    IRS Notice Letter.exe
  • Size 1.3MB
  • SHA256 0e6c9ec44aee5518a67ba5b5beda49639a715f191bb77099ecd57e326fc0d811
  • MD5 7bc5aa156b65b600db5b75ee2e420126
  • SHA1 ee53af6e8315633f4be8552e31183cca47a298f6
  • SHA512 482c0c653a2c95adb30f41df9dfe9dbd64106da3b7d71cd9e55be39a501c567ee6bda2e8811bafafbee8e440fb7c97f789043188f5b3dedfb7b5cf6f891eaf15
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2