Extracted

• • Target
    Consignment Details&BL Draft.exe
  • Size 663KB
  • SHA256 6fbc3e54a04aeadf268907b5041bdaf5af8980d76eafce3bc5d995c0fa779fd8
  • MD5 bbcdacdde22b8bab6d71f543c36c9b2f
  • SHA1 f4752b9407c50396ca6ca1fef1a50827eb5cbc10
  • SHA512 37c504b110e85656398ca91c4ed67e2854252b5402ca1b60cd8a24fa38c4e67c9346a8b4dc14005a44cdab708488bfe8b58f52e36449a4467de928591cbc6919
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2