Extracted

• • Target
    payment swift.exe
  • Size 798KB
  • SHA256 a7655f6638eabfbb8f8f1f2a1a06a3c7c548791e39587b0b9b8aaff68f5b8e5a
  • MD5 97f0b51c3fb5aa3eeba0b3bac26d5dfb
  • SHA1 54158521035e30fcfa5a3fa9947e210a009dfa23
  • SHA512 b94cacca07069df5b8ca5e56ff53f6a8b3561449946bd60fff3d8f1290c9f833a2cca7d61ce755a48b3a8428c9a4d349b23762df61af5b9da31efe2fdbea1d10
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderyrcyloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • .NET Reactor proctector

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2