Extracted

• • Target
    2b72bc4ba9645af5482661c5d1d1c7f8.exe
  • Size 892KB
  • SHA256 b3291d1f731c8e7408bbae7e36242e7223d24d7b3ef0fa2b7f07950be8dd3462
  • MD5 2b72bc4ba9645af5482661c5d1d1c7f8
  • SHA1 a32ae9352ab50a4576c8dcb8a1032a62aa235314
  • SHA512 a83cd1e1091b80fd2868232c0fec244c92f2a8626c92b21e1bf6f186da616fae5874609ce27c39a3f6ae70ccce143c1e282fa78e2d21fbfb04b6693cd06fed7e
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2