Extracted

• • Target
    twistercrypted.exe
  • Size 206KB
  • SHA256 0e1ec8c0b16042cc5f4e0c137f3939aa3e4a47096b32f1c2d41baf1a0d9aa177
  • MD5 db02b0b9211fcaf7a6c0b4fbbf675958
  • SHA1 1ce7fcf4cc07c1d0fbcbb245edc4b1b68face2e3
  • SHA512 ecb4d66ce7ff4a2f0b43b8672337dcfb886d86aa4eb42191eb284242fab472accf626f6488c305fe93b30189f8195b8719539e2ab5e67c78c26e902bc242a2f7
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2