Extracted

• • Target
    packa.....(1).exe
  • Size 208KB
  • SHA256 9ecedea13dc027095e79edab82e3988f028dfda3ea5b5469351a52a82a60ff7f
  • MD5 4ff82568108cb69028430f44e6d95321
  • SHA1 9e04f9469d3f83514ebaa6d8f4b55a32adcc2a8e
  • SHA512 e31164d1acbb50030ef930a86fc916363266ee86350906e2d6038537c06e0caae2dfd163173e98e14a2f320d423b7d5282ff88e29ffdc1c3f6e3700f7a52e098
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2