Extracted

• • Target
    SHANDONG.exe
  • Size 1.4MB
  • SHA256 641c0aa7cf4d3a8dd646a8a295e8c3f66ea01eb4bc86547c90b52390ca04c2b9
  • MD5 2f6a8a3b4280110d33bd4bec3f9ba618
  • SHA1 cf39edbaf3557483f3873e07afffd37544e8d725
  • SHA512 060797161b4cafa74460bc4050a7fe826e9e935393552783477b3d19d0fd8d872001d8f88e2b0c56394d444a0216dc789a75c8b3f3ca744681ea8d8f7a7e435a
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2