Overview

overview

10

Static

static

cff53c52ac...a1.exe

windows7_x64

10

cff53c52ac...a1.exe

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    cff53c52ac9b9acbc887af1ee5407ea1.exe
  • Size 2.0MB
  • Sample220709-hh292afbc2
  • SHA256 1fb52fd8e565ad6737e96ed8256dcfde69bb7ad7b0d81f15317dc25e2dbfc8c7
  • MD5 SHA1 SHA512
Score
10/10
xloaderloaderrat

Malware Config

Targets

    • Target
      cff53c52ac9b9acbc887af1ee5407ea1.exe
    • Size 2.0MB
    • SHA256 1fb52fd8e565ad6737e96ed8256dcfde69bb7ad7b0d81f15317dc25e2dbfc8c7
    • MD5 SHA1 SHA512
    Score
    10/10
    xloaderloaderrat

    • Xloader

      Xloader is a rebranded version of Formbook malware.

      loaderxloader

    • Xloader payload

      rat

    • Downloads MZ/PE file

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks