Extracted

• • Target
    SecuriteInfo.com.Backdoor.MSIL.NanoBot.RKCMTB.20692
  • Size 655KB
  • SHA256 b8392aaf409d89fe323576fdf09bf3320094962da9812918d23bb47b3d8d53f8
  • MD5 f57ea63c56ed7e81e3da35a42a1b9b08
  • SHA1 a9488f60bd1b25b2e36e685c2b2ad0eec5f8c893
  • SHA512 24f199b8cc9f3976687ad7887e934456b0434419028baae41acf0500f5cbef90bf424f87de2c8b3e5bc17d54891acf356d21a0347c76e39569d984e56274de1f
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2