Extracted

• • Target
    Boat Payment Copy.exe
  • Size 301KB
  • SHA256 7de9f7a81557d4a2a6818b50b8f8ab8948ce6329bf1c696d038e1231237a07d0
  • MD5 5978c05476263bda7d960999d199231b
  • SHA1 ddb2e6c5412027261ca3f339e73a309451aa88b0
  • SHA512 7edb0538af7dec08f7f5150b26c525cd2bd4d101a08dec8d48e64619206006ba1daa489ef6c9be2db496832add886da040ef0730320558e4dc5ca0b30a81f65e
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderubqkloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2