Extracted

• • Target
    USU(1).exe
  • Size 213KB
  • SHA256 ebe1f420ea3fcef5b426cf6458d23984e12c4ceb5983571699f60aaa963b159a
  • MD5 4ce7d1db443a1c5a2fafa23ef8b32ddf
  • SHA1 fbf663948ea7e4a1fcfc2d37274d61daf769252c
  • SHA512 e6009a231bb49d3e1b8126f6709b8cd58514be58660e8336e53af38d62c220e2e0dfc0c344d490fb29e80a2e430044b833f3c7856fb85977666a15bcada6d4a5
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2