Extracted

• • Target

    VCS58GQMhuCYghC.exe

  • Size

    937KB

  • MD5

    e36cffd41bac0837943e65c6e96d8f82

  • SHA1

    048bdd4d332b56b10b7505800b4a869d91b4670e

  • SHA256

    33f302f22ca7cfa4de06befaab200c53337b218196a9ef16ff6139d7f09a9b87

  • SHA512

    7c87990fd8cc633280a85d7ab81e6a24edc89053ec58400eb5b0444276540cd4d21ce518086da8dca86fa1febf969f284dd037877ff29f357226fb25a7701dfb

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2