Extracted

• • Target
    Swift001_jpg.scr
  • Size 209KB
  • SHA256 04df6344497e9d1c321f32b61df87db549d179c6c66c3bf0b2cc7f6b1510040d
  • MD5 ede69ed42c85c61459145bbce2fcb585
  • SHA1 abbfa669f9cf688f0ff116d0c624bdd57990a819
  • SHA512 1a5401092eb7ba100f541950883f92c17ed3161895988ca6912a3737d5a73099a6d25f8b957a1b821339560d3253b643625c1b850a2316502d9788d4f42c91c0
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Blocklisted process makes network request

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2