Extracted

• • Target

    ae74b8c9e1f56b45a7cd04935a720d3bb42a5e58d257a648474c89def6b54a01.exe

  • Size

    237KB

  • MD5

    5bac332642f907ed254f85c6b60fa79d

  • SHA1

    75a9bef69eb70ae57d7d8735ece203a97f37950e

  • SHA256

    ae74b8c9e1f56b45a7cd04935a720d3bb42a5e58d257a648474c89def6b54a01

  • SHA512

    8017043cfceba71ad9e42f5bd684e922a16134e023ae84de60fd4a0c94f07e27202e1f0de6a871f907fbb0566d5f38542a0babda6e2e488e3bd38d5bb9e2c6e6

  • SSDEEP

    6144:DOmkNEhXdfslyuJPEXyiaKTrz+MJSz19M90U8x:iaXsAu1EXyvUPJS9MGx

  Score

  10^/10

  xloadertqugdiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2