Extracted

• • Target
    SecuriteInfo.com.Trojan.PWS.Stealer.29819.13214.25469
  • Size 297KB
  • SHA256 1d87d74fe3b493880a672905108416227b6a2996eae2da3d8226cf65ae8ade26
  • MD5 2d435a73a52785b8912a447e4e205e50
  • SHA1 082edf778cbf0a7af0994d2a0b7d397b6a820f33
  • SHA512 288063c4fe25cba62a24a9cb074c0362fd137a54f378e18eb537569750f3c7c26bd1a6343ca95ab805e02cc6b789e3d5b8ecc6e3f877eecfb4fda8c5a89aa7be
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2