Extracted

• • Target
    5770561ffddfc1f36a95c5ed61ddc5fa.exe
  • Size 212KB
  • SHA256 d4257c565fc08d4e0b30d06f2a6935c8882f3a76d6df228f513c13c6e8ee1e43
  • MD5 5770561ffddfc1f36a95c5ed61ddc5fa
  • SHA1 d32362e265689aa2bd201016ae914e7d4de5d463
  • SHA512 91193a55eee179fdb2fa58db9cd406f4c09a38066dccc54f0966e86195beefeafed5c22deb49e25f3e6154e56f856292bc599f8736c5a56ada958a3e2a449a2f
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2