Extracted

• • Target
    Lista de pedidos adjunta.exe
  • Size 1.1MB
  • SHA256 834bbca917e33d612d4989b3b68ab2aec2d6f5ac27494514238eba9f579d9a95
  • MD5 8ef333e61c8c8e85178917675bfb852c
  • SHA1 b11b26da2ab8b2d54436a0ffd0c3612bf79efc0d
  • SHA512 68734f70ba321e977c68b45fd9df22f6ab8df5cab304ab49524e2545325a4fd8a7f10f230a6acf546a1baa757c296c836d227185a3d9f8f07c9066aabe8af1c1
  • MD5 SHA1 SHA512

  Score

  10^/10

  persistencexloaderuj3cloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2