Extracted

• • Target
    IMG_9786.exe
  • Size 505KB
  • SHA256 5568c3fed11b0714b4cf891d08bd645cdee9ba3801bcb4c31a16a510f23c6898
  • MD5 4c3b22fcfeb1e8e9c7b2a4783b88aa09
  • SHA1 d155942d591b8806d3ba99a2dcdb3f6465401aca
  • SHA512 bf82242f6b26e0261b4ed690e1293c8389691d15eae35cbd6a361cd35d0b45841bdea3f52d028bd3b6f976a0fdcf1b5ea23490d0daf3e33d7679f5281c96bb54
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadereqhvloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Blocklisted process makes network request

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2