Extracted

• • Target

    20210111 Virginie.exe

  • Size

    1.0MB

  • MD5

    75ad92105a21f723cab80577de7ce4f7

  • SHA1

    e6ae412993f371e70418fc256ca8259eea45b668

  • SHA256

    924408349b7b3075a26d4e8408698ab07fc74ada1e94dbe35e6297e957724027

  • SHA512

    af6ff25d6c970789623afebc71a0113527dc9fcd00eb39c7f5bb4a61fc497bb5167a4b5fc03a6a38ead8b303dd716562239303117ecbf63aafe761bdf11501e8

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2