Extracted

• • Target
    Proforma Fatura Siparisi.exe
  • Size 961KB
  • SHA256 31fa37041b3f218ac8e44e16ae4bc549e962ce1cda58a1df870179ee94ed1753
  • MD5 341bc3b87842ce7869d240b26ea2810b
  • SHA1 a843015746729c5876a5c28ad06248c0d1b68771
  • SHA512 e9879fcb163d47bf811468c1552d73780e4f4d71e6e35216a6b807410b5547c9fd0c4bc415fb31fb700e5e34a5aa112b207b58a9f0153e7f8d86a6f5c830f1b6
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadereuv4loaderpersistencerat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2