Extracted

• • Target
    7a35479eaff4fc34625ebc35787150be
  • Size 1.0MB
  • SHA256 bfbe11d6ffb3c82c59ac2cf85176583ff2ea5449d926584a59181286611f48f3
  • MD5 7a35479eaff4fc34625ebc35787150be
  • SHA1 519ece99fbbab91367f0b57a6e44cdb86501c3ee
  • SHA512 4e9befc36aec9836b26dee512b5a86b4ad9b1a9ba89424cdf693ad5b1377ec36799ebb35aff0e5794598a6142490bcb597852aab4891da5ff01d5ac48000ad3b
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaders9m3loaderpersistencerat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2