Extracted

• • Target

    Purchase Order -263.exe

  • Size

    1.2MB

  • MD5

    eed4b5009af44f6714fedd14a013c77c

  • SHA1

    2f49c70492785e3aeb7e6ff174fa86977d44def9

  • SHA256

    d98998e1d6649dba775358afffb1771be64bef20f490b5a97fca770f68bf6f2a

  • SHA512

    76fa3e37eebef55f819c028890a84cf22090bc7caf5c6c27b0b7a12aed949caf0a62258f1d81ee03c22d94ee2354dae3635d3f7b968e50c43ff95c3f32ba9325

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2