Extracted

• • Target

    Consignment Document PL&BL Draft.exe

  • Size

    318KB

  • MD5

    ef20635d931f69c41175aa8f1d81d60c

  • SHA1

    3e00db6de337ef48f82ed1af80ca998ea86c5601

  • SHA256

    444e72d12e85dffc1b247b29e7789022b251237f56ea83bf72e3c09fcb628874

  • SHA512

    d9131029f0dbf8f59fa761031f0962c75dbbf138a97344e242434b324110fda7b7e9507b93bbd2224f5bd5cc654e7accce1e9994ddad499e386086d93ded5f13

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2