Extracted

• • Target
    611dec6f91abb8a47e1a1bef6d8933e0
  • Size 916KB
  • SHA256 f47f29cebfa58b4356cea3bb53b36d669a2c4ef9481b48efadcfd1129b518768
  • MD5 611dec6f91abb8a47e1a1bef6d8933e0
  • SHA1 644fd4556037bbdbd71d8add168aa63809487abc
  • SHA512 ab61e586ed3455c1188c9f0a1a16d1e91aa0a10143a34c3ffdd76487ff6f71a21da548b32709fd63f267ed10ebdd3beb4f191d77acb5847216e1a8e786add696
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderi5nbloaderpersistencerat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2