Extracted

• • Target
    ORDER SPECIFICATIONS.exe
  • Size 539KB
  • SHA256 48709c3e07c128283d9d550331d6e5f7c4afeadfc61cad94d769ea8ce7399e77
  • MD5 e75a4df51162401b21c3eb79718fb3db
  • SHA1 3328ead22db03ce461cb8bdb5d59638120e2444f
  • SHA512 316d9088acabc1bc7fa003bf0e5d8f03e96f8242441b264984e317126dbfa2745db557338d34d96cefb18228d00e1b28126d066fd06a810f7b8f485932d23307
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2