Extracted

• • Target

    PO81053.exe

  • Size

    189KB

  • MD5

    133bddae88916c0016892d2cf55b6d8a

  • SHA1

    5eaa43928a9a569fb807f5e8c1ecf9a54da79515

  • SHA256

    f5a88909c2272b7ddba37b210ca2bbf79c4baf80e51f883a36e5887183b84d3b

  • SHA512

    8dc23a5e14f031eaff4ee1096a8f427783b9f9a9ce83f635bf8fd712e78b9f36327b42fba6ffd696684e398fc8794e9a5dd87ffdf8ff533c98ce14856ee23697

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2