Extracted

• • Target
    remittanceslip_pdf.exe
  • Size 212KB
  • SHA256 6e7f8ff3782bb90e21df7fd4f7b61369e10b3965cde2cab0c24d6876809afb4e
  • MD5 6da98c7a947e08c25f2ccf164c95b93c
  • SHA1 6193b5c861272190e8b6b6d39c0ee3a10042f2f3
  • SHA512 c7c0035903612dee1c045f394f2e071dd6e1403819c634ea304ec561b61d5af80f3acc6392354b188c53e1fc181b00c240ebc493b38d08d5ede8797d6e6fc146
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2