Extracted

• • Target

    bnh.exe

  • Size

    614KB

  • MD5

    c2927f706f2fc5d37767de3f40c8671b

  • SHA1

    457a0cbf5058152f04bcf018534646bbce2b5646

  • SHA256

    1a55fa78a001127ab3e53317fc29487b57343034496594949610a78191156519

  • SHA512

    5c37cba7f9dd2bde172daa6a61a4cd2d1395cb3dd5c8016becb13a5054908b003f416a37016f188d28db8d5e4db9199a0f9983cd52ee1a393d1a23ca75415539

  • SSDEEP

    12288:xMz3Zg6g2zuXCzXDUO03kdwTYDHiwngDa2mYj:xM766g2qSzzRDLnD2m

  Score

  10^/10

  discoveryxloadern066loaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1behavioral2