Extracted

• • Target
    Copia de pago bancario.exe
  • Size 922KB
  • SHA256 85dca30464e5d239a82140c6611e7d9d2e4e8a7400c869c36c3c4999a0b221dc
  • MD5 6dac7fe3d5c2d600fe6650d571bfb44d
  • SHA1 dc4b11ceeb0c04d0528c7074cc181714b8176050
  • SHA512 7bd10db85df1bd405fbc278e8fd25cc7b1c9819202617aae88cf5c2859d2829ae29fb13b5fb61c21b936a3a56f68213d120ff5035103ffc8581d9f07a5a54d00
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadereuv4loaderpersistencerat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2