Extracted

• • Target
    SecuriteInfo.com.Trojan.PackedNET.524.22310.8249
  • Size 1.1MB
  • SHA256 6ceed0880cf4e6861ae894331beef85274f7f6a3f8dbc19d4a5f4e41b239439e
  • MD5 abcb1b3ceee58e4411d36a45b8af592f
  • SHA1 1edbb987b5ced87ab7149643621b1dc60ae141d3
  • SHA512 348487843c9b050f390c6b39f41c71f84955018624fd065e20d6a46d58ddbc0eeab4ed2e8ba805b1886cb7f517cff10b16e4eae3cc8d640de2a9a2ade0e4aa74
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2