Extracted

• • Target
    efac1cd161932cca9ed94b0a1b3671f0
  • Size 902KB
  • SHA256 347fc805a4e64d0e7418dff453ab17c3f76bb0809ef0cfd4b1866d13d494a935
  • MD5 efac1cd161932cca9ed94b0a1b3671f0
  • SHA1 81e9f176085cc920ca18cf043800c4b0ec38de30
  • SHA512 97a2daa982b92774537829ab7959bd8aff64591350d51b35aedb5b1a5bc6b70caa231030620c376d1cd27dffb7c49b8a6d2b110f41175ce7b629cb22d08949c7
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderr87gloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2