Extracted

• • Target
    raw f.exe
  • Size 208KB
  • SHA256 ec2271f9e6e57b84cae0e6df2af197a02133e5644d55eb3d2be373681397f919
  • MD5 319f554641bef914792208e976030780
  • SHA1 111fd72e1f312727754f784a0da9b1a98fb4a00b
  • SHA512 a3f900284c9295e3378f291e41b7ddec4316c6916ba54b8fb7f448acda4c44bf9ec0331287a03b719ff451e9380b9a790cb7a60cb926103a97cd8617b3c2be6b
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2