Extracted

• • Target
    68521717.PIF
  • Size 291KB
  • SHA256 3cba15742d927df8dacc3b41005dfa1f8e66fbae71135782befd3e55d5aceeae
  • MD5 c3e495a5457d35b55ebb9a6d69b69f40
  • SHA1 270dcc86f4d1c7765380fc3920c73893a34e7633
  • SHA512 17922f514c2b674c9e2a3db713a84eeb7237fd9b590ac24ff5463de4365853b5843cc114ac7fede237c2fce533cf96e67a87b0b998a2fd2569e7873dcec64fc8
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderuar3loaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2