Extracted

• • Target
    12ef0d814982f8902126ce887aca5741
  • Size 219KB
  • SHA256 6e2d552e111d1303a2b72809cd77f7aab66ce3e7bdfc243f0dcb53c30d272736
  • MD5 12ef0d814982f8902126ce887aca5741
  • SHA1 155412b7d9f08710cc0ae210453deaffe3651334
  • SHA512 4c13a7e509a9d0b40bd87e6050ffce4e488a48a7f52c411210dc1f303bfd0c3a2a72c02e4707404e5a45e5fe2b3a550b2acfdd5544d7553354ca61149ff2f9ad
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderitq4loaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Blocklisted process makes network request

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2