Extracted

• • Target
    u prilogu je nova narudzba za kupnju.exe
  • Size 1.0MB
  • SHA256 af2a8024939f13bee37b6d3a35aa5df93e2a6b11cede4bea19493c4d704b050f
  • MD5 586db006f3320cb9a41a62f7f5a0c4e1
  • SHA1 3b6f558429e9fe51b191dfbb63bdc7161d95870a
  • SHA512 aa79f05e68b71cb7cb5ddb9f12ceada09e7433d7733adcde6c20eb1a3695cff22161cb73e8cee0898444e9e1ec9258b2a6ae4e2e780b5ed9849d4a1596cd3d17
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderpvxzloaderpersistencerat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2