Extracted

• • Target

    fb6c841478354f42dd2baa5e0b617dff.exe

  • Size

    207KB

  • MD5

    fb6c841478354f42dd2baa5e0b617dff

  • SHA1

    c1d1212b6e7cae77ae2d617f461a7d6003cb6c6c

  • SHA256

    b55552391ee123f26e577b412c0df78bd0a59644ec510d1e7e708feff12a2abb

  • SHA512

    49fdaae6792f72de12b4303c4a1874a99e7d1c69bb32cb37d59d9e207e693cdf90612f5ec8278cd7e1cb8c1d1dcd8124b7f66165ed6730ab5c1ec0e8cc8dddb8

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2