Extracted

• • Target
    f4cd57e3512cbf801352ea10c2225d4b
  • Size 1.1MB
  • SHA256 1e5bb5e00fddfcc62c8bfe71b46a4c8c6c22986c7a51931d16b8ddc465170d72
  • MD5 f4cd57e3512cbf801352ea10c2225d4b
  • SHA1 461c0eb0f7e2c43637cbe6aeda253ff67e272410
  • SHA512 2bf58ad54361149d8c815a8f40776f7aa7ee63c814e5167e0c04f6e76792add8e5ac87f04065f475565368add4f57c96aa7617b38901b5c3c73c57e1421030d2
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderht08loaderpersistencerat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2