Extracted

• • Target
    f34a9eb165527229a5d67e1029c58f7c
  • Size 1.1MB
  • SHA256 770c04c7c3a53d584af17e38e8e3fe5767d431e26ca59b4dc20de71045354295
  • MD5 f34a9eb165527229a5d67e1029c58f7c
  • SHA1 08610039c44dcbbd9e352d174e44cdc1968ca897
  • SHA512 bb4805eeab2eb5968741771a2c28cee16f6c626a5fe167620dcb1daadac3c54366618d39a771d124f3e4d2a8001af12349ac7f349f9d863477c6ca438665431b
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderfu6bloaderpersistencerat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2