Extracted

• • Target
    d7747ddd730e95aa0b1edfe41d1f80b1
  • Size 374KB
  • SHA256 dd4d4174a3dc3aa9f5ebff021eb9e561b6e22197d84d4611c6bd83c6cf9ac875
  • MD5 d7747ddd730e95aa0b1edfe41d1f80b1
  • SHA1 ba38c2652e032e4db4b51efbe70c985f82135cc6
  • SHA512 80a6e69b0441083324b78335e59437e5de2daec74fb06f3a332a5afc344375e141c71702477796f944618e2ab5e406127746d7fe24aed4b6f56dcdce0994ceec
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderdpzzloaderratpersistence

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Sets service image path in registry

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2