Extracted

• • Target
    swift_copy_ 1257.exe
  • Size 358KB
  • SHA256 d37aa13c134ce2c1938ce9b4745cfe5af5c3b8348bc7b669731592596bef5e48
  • MD5 af70790444c9116f55d30d4cc68aff0e
  • SHA1 dd37c23397b8e058810e1a4727be8959330b66ff
  • SHA512 6e261093bc28118703877e7664e05cdb7dfe1fc7ae52d4de741b82d613b4fd0896ef1cbb2ef5a9d9a7dcc78315621403833e9507baabfab7253f2b06a9a10c9a
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderrht9loaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Blocklisted process makes network request

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2