Extracted

• • Target

    SWIFT Payment DOOEL EUR 74,246.41 20210101950848.exe

  • Size

    895KB

  • MD5

    b8ead540e40416915bd3f6134f2017bb

  • SHA1

    e74cf3642e4bd4b3f616bc5230edd5312d97ecfc

  • SHA256

    201f068c15e749ce1d3bd1a8e48909a9b0e8e5b0774b0eb2abc9096449fdbe67

  • SHA512

    1e5631249b531d0abf6f3603016ec1e06d3efe55bae91c8db116ab5c94f126473448bf78338163a8cbc526bb168d70933014222150afbb9270a08303f0963002

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2