Extracted

• • Target
    ghhjdhsssaj.exe
  • Size 308KB
  • SHA256 0e620198a4a7ea1ae42f2a6a9b0e8c40ce320fc2f52710d86f4158272ebb248f
  • MD5 6d8c4dfb5ff11f7296b89f8866870c0d
  • SHA1 a9e114439175f57f4e77de9eb40890b41737b4e0
  • SHA512 8bb0b42dd241b719feacb25a0c3222a79179d01494a05d6b2b8f035b62f48d5fb02139451e50c9cc1d1cdde783521457cccc9717e85bb3a23c761a1503da4534
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadertod8loaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2