Extracted

• • Target
    xZezXtb9N6sKgxm.exe
  • Size 658KB
  • SHA256 59926e3453980c8bf4cfb466d00770fad47f05cd9c9e2a1ec7a25da16b38ebed
  • MD5 f54b956607d0370e0ad3084242712bb0
  • SHA1 13593a9382790bbcd6ecfd6549a0b05b22c8facf
  • SHA512 675f7e6b3494b72dc46ccc9853885b71de32fe40c6707c522180c0f6bc2a603ad96b028cf3a5f59e111311dc6c42ffecae3ba59cb5fd67375c9d5e8885d77357
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Blocklisted process makes network request

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2