Extracted

• • Target
    AgroAG008021921doc_pdf.exe
  • Size 296KB
  • SHA256 c1fa41f10a15d258d2edf7c06648ad2413ca25d7e2b4de2b45acfde204b1cf45
  • MD5 8c17ba485d997f4613ae37d2ae89d724
  • SHA1 910883faa1ea6c99da8e26e44e3a9b29a6b21021
  • SHA512 36a771bdfa3657a2bd606707267ef442a84cfb236d548efe189049aa2f3656b3a0f70289653ce49b885240ab081c68cbd17ba0c3c6e019e9086b10a4896ee8f6
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2