Extracted

• • Target
    BL8785.exe
  • Size 1.0MB
  • SHA256 01e55c453fc19c5df2c53fa3e1ddf9bc8f8af5ed23d361f3bc30df2e913072a1
  • MD5 a1ffdf4ae3d299afc7896374683a9c79
  • SHA1 b7563f40a8c91480359e927cd810b613f7129d23
  • SHA512 f5a52bb347a03dcd64f811047c0eedbe46e32dd3c89d00cc59c01f6736a4d162d0f782741e47e8a08cde578d2aec315dba1afe80a96a4ea89bcd85bf92bdc167
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadertee5loaderpersistencerat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2