Extracted

• • Target

    PO-RY 001-21 Accuri.jar

  • Size

    372KB

  • MD5

    c57bb7c025860397afdef61c676ead90

  • SHA1

    6b2195e0b140ad27c5fd909f4944b5a63c2a6e08

  • SHA256

    63b3402660ff4a015ff3bf516ece2da73234e315f5b0b7235ef3c4523d846152

  • SHA512

    7f1ddd540b4cb316101e1facb8a217047d607b7bcd9e888f020d2ca4fa46f0e04747fc465424f87c7e1a4c8713aa84bb34b33f4e2b97edb16d4c66392f90f6bd

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2