Extracted

• • Target
    W08347.exe
  • Size 869KB
  • SHA256 48e91aaa4b96fa73dbc3bdb98ca784031bb6bed5aa790acfb85d258e7738044a
  • MD5 1cc80b3efd15b9464056ad7b1a29a0d3
  • SHA1 ca666ffa499ec1980e355bb6416da58300bb9148
  • SHA512 af8b1df61c300f290118bc0f395392212a6852516e6d8d4543d9a8b6f6662b8b4017f7af2deed747a22f7289ea7abdd266d0d0b2d29105141223b82293a7bda6
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2