Extracted

• • Target
    1dd3dda596f5391bb865683fa49b531e.exe
  • Size 1.0MB
  • SHA256 2abb16d594f4b36fc8b8aab8cab7736350421c619cec8e12e8975e87f7a99faa
  • MD5 1dd3dda596f5391bb865683fa49b531e
  • SHA1 37eab36b9caabc5e1d55086da5c46bc50b012fca
  • SHA512 7c0a2e9d893168c64f3bf2f3dee38261d24dd90be523d313651cfe9646bb14743a09c319f4d0123fbf0fae587f269d8ff6f54c369a52f7e4d78f321ceb81c688
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2