Extracted

• • Target
    Noua lista de comenzi.exe
  • Size 737KB
  • SHA256 527036f9e449de86dc23ca03f80ea7da2d0ee7d7752203bbfad4ffb9237a19a8
  • MD5 c6c9905431f32998369ba3fce5743a2b
  • SHA1 7523dc8923179973879c227ad1776ff583660e3d
  • SHA512 f2c49952055dc82cb91777ac1f68c4c8fab85d4824502a6f357e0942d30c9e67c309d86fd320bf8ca968814794016950663e3f93431e0cc524bf910fa4869685
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadereuv4loaderpersistencerat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2