Extracted

• • Target
    TEC20201601.exe
  • Size 1.2MB
  • SHA256 73384c630a5bcbb5201f567aa142fc712df5c2ceb9b61c301a5e4a025af2b3ca
  • MD5 19682ff802fd6fc13c896ba4572e9edc
  • SHA1 c52eed4a18f23464ef7c8968c4a7cad63564d2e6
  • SHA512 31b65796fa7de32a80ab5244edea91642cca0b3161bd82a93d5601bd1f9b28b5de6a6647a053dfcfca2d10a54165dcdff9f221cb49690707b9a4a85719a56dc1
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2