Extracted

• • Target
    vbc (3).exe
  • Size 794KB
  • SHA256 99cdf3421923232c160c5075af3bf8620df65bd59cf99cc341f17a58e1eeb4f2
  • MD5 09a2d9ea4a18f01aff698b8cfc98a87e
  • SHA1 9a9e1510059c06bd0f5398c6298fcc08201bc7a2
  • SHA512 02a8ef4e9f5e200175fb193f7c147e2c74148bad3fce867c5b484e066395f093e041225be068e1c00e6d6a0f1245aaada93675ab55865902e6fb9c9172a20990
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderrqanloaderpersistencerat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2