Extracted

• • Target

    6a648e78826c4e2e6a4c1f984c91cbedadf14344383306d023f4730d481bce05.exe

  • Size

    743KB

  • MD5

    10b55b038f70d21f31cd55f787d44ae0

  • SHA1

    8ffb7bd8228f943c54e5137f1894dc6c8b4a54d3

  • SHA256

    6a648e78826c4e2e6a4c1f984c91cbedadf14344383306d023f4730d481bce05

  • SHA512

    86855a81e92af79055d141f52b73305734763cda1ca4602709e88e819c0e6b6b432bd60b24bde53d07081e2ad20a24dce62e502417be1f6bb665b55f62dea963

  • SSDEEP

    12288:zlqyqREeIzk+ZkO+SaTu8psEd7zp5I56IW3B2kb+tqYtkmJ1M:zNeIzJZkO5qsoPva6hEOsqOk0

  Score

  10^/10

  xloaderhfhfdiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2