Extracted

• • Target
    Ocxwgtrrxrnbohidoxavjksseafwerivek.exe
  • Size 907KB
  • SHA256 40a298c96e7be4f585a294ae8453cae3ba5628702462d5101ea607963041c9ad
  • MD5 bd7ab8afeb2f2a7037a89ef16a88ab74
  • SHA1 493fae18577cc54d44a94e07bfde9709d9c8c841
  • SHA512 338005f78e27524357a277d3eccb3fd6696dec2d3ebe0f15ae5d83ac31e05590f34c3b248c40ffa3277d0a89adf6c546f405a046c71aca9690b91f1d3cab7496
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderfm6iloaderpersistencerat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2