Extracted

• • Target
    Ciikfddtznhxmtqufdujkifxwmwhrfjkcl_Signed_.exe
  • Size 774KB
  • SHA256 d04efc1f583b9d7a2f2e600a43eeb8fb8359432c591a4f8cc583caf881097421
  • MD5 77e8506eb1d686c575e73c04bdb58bd2
  • SHA1 8727c40c483fdcfaee8a65ccf857caa46eb3f07c
  • SHA512 58f22cd2129cb4cb73c14f93840708fc3bb68a718fc6e179137e1ea209ca6c1327aa4d2918b42c26233a16bdd9a39b7f685e1896f5aca0bb73e297c7e4347906
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderpersistencerat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2