Extracted

• • Target
    SHED.EXE
  • Size 295KB
  • SHA256 ad855c55e13ef5274a20805a3836b508c29cae12d0a2de2807aed08ed4090ddd
  • MD5 c8b318ed16d918943d2fa406840738c4
  • SHA1 a61153eae1a7aee1ee57128f3f7284ed6592af30
  • SHA512 dbe2be95fc13c607e81093ed4da10418a8d3b761a2c38179f3a5045fd2509d3c0e3b0ee589a55f3c8691d99ab2e48bc9575b60d1a26b391fd4b6e6a59e1acc31
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2