Extracted

• • Target
    5594b013baa0246296cf27c10804e75a
  • Size 647KB
  • SHA256 b409cabbc8dbdfa8a3d1a60cb225f27386dfcc61b3f7379812218b6660ef654f
  • MD5 5594b013baa0246296cf27c10804e75a
  • SHA1 de3b6f5bc6eb3767dd7ab7bb405288284b4242dc
  • SHA512 b2fad8b5ba3e89df2fc626b3261d8ceb8b319a4f3a9465fe05c9b628fb381bc85aa7bfa64334c3bec4891814956076ac9bf80d42a62272bb11b2665d4fa7151c
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadern6g4loaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2