Extracted

• • Target
    payment copy.exe
  • Size 278KB
  • SHA256 9322c039cec01a5d43492f882c2b5d02aa9357ea4c2e95a039ea1ca1841112da
  • MD5 91a91997f8113487f258846b7689bd2f
  • SHA1 a01f9d8a72c0afd243a7e3161794e1895af66ac1
  • SHA512 be8eb5642f0b4719f8c21435f2bda1f9785a2e46d68be00cc4a856a6ce413ab1be662aca6b671765c5c60ed7c121f455fbb0bcb6dc18ef754bf2d4760e606e65
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2