Extracted

• • Target
    swift.05fd90a7-b0d0-49e8-9d15.exe
  • Size 1.1MB
  • SHA256 e79083b58aae06c0413f65d3979fcad177112e4f49ef3568d0b52392b07ff720
  • MD5 b8d1d81917069e3cdf34088836efe9c0
  • SHA1 b7161586fa8437a6bdf0d3a15c831d35b0f0e262
  • SHA512 e116f728f36e09cd325a8617668d434db555cffa4282dba96591afa974f4c79bb0385922677eb67945c98b3508648397b1af16041388c7224cb1ebbf9a7f5e72
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2