Extracted

• • Target
    34f0a0bab5402fc66736cee86b1221bc.exe
  • Size 683KB
  • SHA256 4698bc9f2d175db34261a75b9af17e3a6da6e1bf2df9c287c37fcc133d421cd6
  • MD5 34f0a0bab5402fc66736cee86b1221bc
  • SHA1 3f7004455e5390448c360c0201aa8ec61ea4bd1a
  • SHA512 e28074537087c91a1b176220ff8c509551b4225568300730d29504c38672b615af9e6664e8da9341bb88ee98e2f4cd69cc7205ac4d028b1947e08e70652a5708
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderransomwareratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Enumerates physical storage devices

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

    ransomware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2