Extracted

• • Target
    2ac8d894e24bcd30aca57b0fd640250c
  • Size 723KB
  • SHA256 5627d54b0f87a8fa0e9a33d2cbce145140eb0e88e77f1076e7658310b742aa83
  • MD5 2ac8d894e24bcd30aca57b0fd640250c
  • SHA1 734a49e6546fa2e8109bb49819ba8732fedf2806
  • SHA512 900b755f4464fa2e173af37c204b34f59c29cc18cd9c4e2618c0f1f6affa2a4fef4f34e61c27c1731bc5c79ca208ad343ee2643cc51084371b3557eecf490d07
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderht08loaderpersistencerat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2