Extracted

• • Target
    864bbb6314ae4dda7385906f77fafd29
  • Size 864KB
  • SHA256 c9c30e8b5fcdba36818cdb867d9c3aa29ab421ea94eb77d2eb82001c8d9e770e
  • MD5 864bbb6314ae4dda7385906f77fafd29
  • SHA1 a7dcc4494a2eb7bd712df04ec988448886c87c60
  • SHA512 e703ab201c74ca75d0a7ac33062736892f965e2312401d1e4ffbe8c249d2e4794d1eff1e6c90221b7bab28f0eff722020257d6d116b18ba105a98b313bf36092
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadern6g4loaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2