Extracted

• • Target

    c1a46cb393041dbeb3aa1355d76232c7.exe

  • Size

    1.0MB

  • MD5

    c1a46cb393041dbeb3aa1355d76232c7

  • SHA1

    f2573d8ae24aa2a4a24e6a3ed6170cdd29658211

  • SHA256

    e49c51a6864bf50e27baca58c5a2420046cae1803c5e0338af152b50d0dcc215

  • SHA512

    f6fe4d189141e7f0f867f1fdc55211c36ac810d290d84e8fa42b74e22a956e77b23f35f7c92040618c9e74028d197ca1045b033cfe15a099c5dcc22d92f7b076

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2