Extracted

• • Target

    SecuriteInfo.com.Trojan.Win32.Save.a.6339.10816

  • Size

    2.0MB

  • MD5

    9597713af0d2566f6e3186196d31e520

  • SHA1

    29d71fdcf9bf142da347470cbf0eae90b352dd7d

  • SHA256

    f3c279e61de77236f3390c91dee09f02aa01974e14e429426fa174e0ff8a7512

  • SHA512

    593e4ac84836db4462cafd1420cc2d5944207e518b64be801acec98ad17d441bcac16c06784894ade681d63ef4140b1098d257fd06f6ae21c39819101d1453ed

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2