Extracted

• • Target
    65f44440d481fe7d8559a1e4303f4070.exe
  • Size 445KB
  • SHA256 9ab3bb93a6d39ab709c9b2369cde749ccbe7f3796c7c3e2fc39aa4715c3bb0fd
  • MD5 65f44440d481fe7d8559a1e4303f4070
  • SHA1 9df52bc586379e05424b4578bb2b76e31627581c
  • SHA512 d24f97fc52beff69bef936c469bb787e1a657dd07a05e1cf6c80ed6c1bd57f0aa63215beed2e7b41d56100655931803c4d87635a831c71c65bdd65689cadac18
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Beds Protector Packer

    Detects Beds Protector packer used to load .NET malware.

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2