Extracted

• • Target
    SecuriteInfo.com.BehavesLike.Win32.Fareit.dh.25734
  • Size 981KB
  • SHA256 e2f640f8cdc89a54ecd8d1a0c8d4b8a4d1e6560f086fd82d05e0010d95a1d9e9
  • MD5 bc525d61492045490d2881099da3b8c4
  • SHA1 84f2c141d5edf7e0d7d3ff021272aad17c100705
  • SHA512 ee7e7bf3422597f784d905e6329e4e8ba0746859d84dcbeeece885283f76c3260c1b687e0f0840d15a96c2c50d1b029931b59491f20c950173e20ac639b65297
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2