Extracted

• • Target
    brsi.exe
  • Size 213KB
  • SHA256 ba02b1ff767d07fbcd13529b70ce92a08238ef31bdfc4058b23023fc8176d26b
  • MD5 62071352e514bb7df00ccaa420d6f2e4
  • SHA1 3dae4fbdab054113a4fbc9a43b293eafb5cb834b
  • SHA512 7db268cc5c04ad2cba301628f2f2f12ae95e32884b9e788e06499995dc4153ac7ae3a5033ac72ceac65616c4dc31ec6ec7c38840000e448dee537f99e3b4c921
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2