Overview

overview

10

Static

static

0229fa24ef...27.exe

windows7_x64

10

0229fa24ef...27.exe

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    0229fa24ef686c20e6d50c5a75aa8c27
  • Size 612KB
  • Sample220705-h9hppsfack
  • SHA256 9696d3ec13f85ada39b140ae0096e765db0ff630f351ffa1e96484f6a4f2f030
  • MD5 SHA1 SHA512
Score
10/10
xloaderloaderrat

Malware Config

Targets

    • Target
      0229fa24ef686c20e6d50c5a75aa8c27
    • Size 612KB
    • SHA256 9696d3ec13f85ada39b140ae0096e765db0ff630f351ffa1e96484f6a4f2f030
    • MD5 SHA1 SHA512
    Score
    10/10
    xloaderloaderrat

    • Xloader

      Xloader is a rebranded version of Formbook malware.

      loaderxloader

    • Xloader Payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks