Extracted

• • Target
    SecuriteInfo.com.Trojan.Win32.RL_Androm.R367639.12654.17259
  • Size 212KB
  • SHA256 38b6a40d2eeddf38695294c57971fc2efab81fea95100260a2003baa13616b83
  • MD5 2915c0afb0b6b26a5a699965d2119f7a
  • SHA1 32fdcc2e0bcfc476347078d7ea05f12d5a259bea
  • SHA512 b8312043058b28c0eede079425d785b581aabeae63c889ddc4382faa2b070333fc8a6e76f7810678cb9ae96b9e52d6e48604cef9417c565c97c0faadfe36b953
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2