Extracted

• • Target
    order no. 3643.exe
  • Size 689KB
  • SHA256 565a3fc27dfb56071acfd1e8c492eb3becbb587f0167353834e97c3819cc1337
  • MD5 499829de5ca971cd127b29b207761b4c
  • SHA1 dc12198582e5f3ade52a23298720726ff09567d1
  • SHA512 f4083435e6932f7926f21edec23bd234c6df3d326196d44002fe12ec654422ed7cf53692845c4c56551d4856d5eed90e870bb7c98423e1d48a1dcabcfe774080
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2