Extracted

• • Target
    4c251973739cc6c11629ff2ca6340049.exe
  • Size 858KB
  • SHA256 ba036ae8ea1f0edb73e54c34031ae4eb52862512054e014ee9d21ed04fdca86c
  • MD5 4c251973739cc6c11629ff2ca6340049
  • SHA1 068858d40ecdcd2ddaa8582173774a38ddf833e7
  • SHA512 14897c7dfd9379f183a32ff18a36f6b9a9de13e337e4e84f1d76a8439f1b0f77d9cc28e566f88d273d1fa03fb6cbf7cec944626bf0a57650584b1aa6af869620
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderransomwareratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Enumerates physical storage devices

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

    ransomware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2