Extracted

• • Target

    SecuriteInfo.com.Trojan.PackedNET.507.549.448

  • Size

    432KB

  • MD5

    528c0afa9442eb19e7d109832366432c

  • SHA1

    5c523cd2a67ed3e1e7cb8820f46cc6c9677ae505

  • SHA256

    d433e7ca5197ed83d851161b45aa94ae8b469a2c711b7a327d749c32279785f5

  • SHA512

    e1e3ded8f77568156a5410c3d03df0875d92071e5a744fe7bad7d15662e141317efc9a3e64c8a7532f2053c18d660945f5de059be15f9ae622a0af5297340140

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2