Extracted

• • Target
    Scan IMG-PO_#091829920-02-03-2022.exe
  • Size 1.0MB
  • SHA256 8f9f3e0d7eebe0304aeb35eb75be87c7bfe13859e00851df037f54d14765cbb9
  • MD5 ca60cfa1fa8d2c8a268cca6d31a7eab9
  • SHA1 91c7ddfb8f716cedd5e9876a7d5695d5d974fd1b
  • SHA512 b142d7f9aede9c3e00d0f0006a4ac62cf2f8d32523eecaff3176526bbfa9a5489e3d52ce4d7ec8487f786f243ad163bb7eeaa20ea7e7e0d6622be14f3985c9dc
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderhue5loaderpersistencerat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2