Extracted

• • Target
    5b59e521935e56a03255623df51c1631.exe
  • Size 473KB
  • SHA256 e6370f5f39e8e3d7a2506659786deadd1fe5ce8208cb2b6bf7748b6637a3b793
  • MD5 5b59e521935e56a03255623df51c1631
  • SHA1 b6714751ef5127dd84bed782a30eb44b7add8813
  • SHA512 8d0717bce547dadb138b4f72a6219ea64cd3d07d790e4f1f5a7cec2d45cb280e0edcb6d286735ae6d539607ba8f75021b73913a37a1e23d9ba2e1e1c68bf6453
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2