Extracted

• • Target

    BG V.085(07)-REVISED DRAFT BL.exe

  • Size

    773KB

  • MD5

    b3ee3a00329eb1a0e1ef3cd71f952747

  • SHA1

    2d5eff3955d2ded49ede5b526c9bd0e2a1afcf19

  • SHA256

    b95718e6a008dc7f10900054853e7347c62f38463edcd17c9527c2d491ee7721

  • SHA512

    35e11cb2ca02c0a2f20fde84c59afd67ec6993462316c4d54212a2f1a52dcf1109e1a1d166c71fded3bfb63c3adf521f1b93c9fcb7cea658826bcda26bf56313

  • SSDEEP

    12288:7HGfIuwOEVGkSj5kG9oIZOFVsE9oINa6cy5IjTJWjUoOxQUzfiU16MHsS1P/oDel:z5uwOe0P9oI0KW/NariABGGDMSuH6

  Score

  10^/10

  xloaderge32discoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2