Extracted

• • Target
    257331ce21922bcbf76f740b83278672.exe
  • Size 1.5MB
  • SHA256 38f7338384d3c8576e23aa876f7819c1f201e027bb586900aca0411ea665f07a
  • MD5 257331ce21922bcbf76f740b83278672
  • SHA1 f5ff6f42b567602f80f11513b6eeaa3bc8b3cf15
  • SHA512 5937de824f8cdc3646b6ec2d3c1c9a30e2413a97eec9879153d5bd421e30d3300975d388b73de6c95fb1da119daf06c697dfc0e11ac95296b0f0b2d41d044842
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2