Extracted

• • Target
    Doc_74657456348374.xlsx.exe
  • Size 731KB
  • SHA256 180444e71cfbd639cea07e4cdc28099a444839f5ad3eb024b87dc9664fdfd5ec
  • MD5 1e8f1e78b590bd90b327429d233c2fe9
  • SHA1 83eb02aa8a04deb275763d0ca93b130241d241a2
  • SHA512 fb6133a86040405c7063effed12866f9964ff3fe323726624806c3f718296de9fa9930235acb4ef28090fa2bc9c5194bc4f0bb9e0b29399f0ffc936c40025c55
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2