Extracted

• • Target

    quotation.exe

  • Size

    480KB

  • MD5

    b8b31b2dfb196bcb986dddf77bd5c7d9

  • SHA1

    ff124d255fdd65fb6bc7071af8126557e777975a

  • SHA256

    c826a0b0506ddc4d93aba9f41ed795a88cca8bdb8c54f4af5d8dbdf9767e9ad3

  • SHA512

    7eda7d2dc17ceef9a4fd1a0c6c9e9634e861bab4919312230733e5c2772d09de9a25ce43397de018614bc7e48ce416d56e7dfdbc7307b36da9d7ffe8c4e0b9ab

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2