Extracted

• • Target
    triage_dropped_file
  • Size 242KB
  • SHA256 3a00a090c263abb496651ab7cc34306e224c62b14c3a8b85fe56d30c51af1bb2
  • MD5 02a922bbd5a983fb351ebf4d0c2370ee
  • SHA1 cd2ccc1597efaac9c295314b7abd99514dc2f1d3
  • SHA512 c0e92ba6573cacc1d3d645a39f403c4455ac227cc2ed64bef7d2e33a58f917641a5393114217540ee30f9ec542bce513f23e8986321c36efd7acf9d75898b658
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderxc52loaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2