Extracted

• • Target
    92f6235668a7c0e38d874204e701f558.exe
  • Size 296KB
  • SHA256 3d0defc77abb415c8854149e73e067b94bdb3fdc638fa7e104bcc4a325dc658a
  • MD5 92f6235668a7c0e38d874204e701f558
  • SHA1 bc93ea792a88b2be1af2b974bce9981316f1a986
  • SHA512 8e6285c08f10f203cd5d642f79ca87a15945485e9a288c1fbda4f36442a1a1f1ba667b3083d5841743be5692d28c944c71651c37ade8572ecc7272c72e13d1dc
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadert9hhloaderpersistencerat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2