Extracted

• • Target
    ff766cdd10083147250eabfcaa76bebb
  • Size 572KB
  • SHA256 6dcb58ae937b9194609ef51a11f945abb7b82d9f10e032bbef2fda12ee96e6db
  • MD5 ff766cdd10083147250eabfcaa76bebb
  • SHA1 936815953ebeb2a771b03d86923079c01d2eb7f9
  • SHA512 bdf81fdd836b74762bc22d522c9e6a2da73923a62355395472f8d9cf781bcc1fb8da7a6a165ba834ce18a913753e3463b4f9380e67a2cc136db0b2afcf3adac3
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderr87gloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2