Extracted

• • Target

    099898892.exe

  • Size

    1.2MB

  • MD5

    e1355062a95d23205f54d62d2e234f04

  • SHA1

    6f142af7118a4275e242c1f1a15c28242f2387b1

  • SHA256

    7579eb3b30e6ca9d30da39ab0160dee37f64b7cfd8c60610c0acd5b2c918ea45

  • SHA512

    a9ea538b32affe28adda41153adf04a42f11371a49be28b17d825d740e4c2564bf7786a64f86c8a06e6cd2f8261a48870fa02147bf9e0f9ea809e9d4a5c138bf

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2