Extracted

• • Target
    354cd2be340f18dcc003d74c3c858b7e
  • Size 934KB
  • SHA256 b3b8ceafdfc6bde8a73c68005414b709ca2b08f5eecfd9a49d769460d6c17c98
  • MD5 354cd2be340f18dcc003d74c3c858b7e
  • SHA1 98626fc6e5cb77ce305338495f402c811fd71207
  • SHA512 1f29bf46aaac5c3afa91c7c56b56ce055be0f233b632c988f63cc83aef3c9828dcafa32e65675a031148b028a47dc3c76ff759b35909f3ddb5e48150cc6b80b6
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadere3rsloaderpersistencerat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2