Extracted

• • Target

    92c35904f4cf224c1a26f7162e465b02.exe

  • Size

    17KB

  • MD5

    92c35904f4cf224c1a26f7162e465b02

  • SHA1

    d4d1635404188075b42f49c4714cc85faa54e71c

  • SHA256

    bb81812044069608e1ba320fcb7b878c5b6895f5bf91c93027ab4161042d01c7

  • SHA512

    43f28013fa83da1957cda63cdc07b12a4ee9e16f54ed1f8ff36d83d3ce3dff7d710a630e8f042291162eb225e3cd6c08c018fea28e87aa4ac3f0a24b2879c9a8

  Score

  10^/10

  xloaderahc8loaderrat

  • Suspicious use of NtCreateProcessExOtherParentProcess

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Downloads MZ/PE file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2