Extracted

• • Target

    d3e3e74ae005ecdf559e792e9c26c1b5e26493f85ec256bb98c544b418fa7475

  • Size

    214KB

  • MD5

    7fcf8cbc72fdf0ad1998b9a3c3e1c5ed

  • SHA1

    f8646738017c782bfc3922fac667098f0e5f6e5d

  • SHA256

    d3e3e74ae005ecdf559e792e9c26c1b5e26493f85ec256bb98c544b418fa7475

  • SHA512

    0c737d21b75639381f2c5f276453ad16c82b9687b215d371887d41a7385a97362c5922f40eca0b89029c5be7a87f5e24344d407612f5ca7f29e57b1049599912

  • SSDEEP

    3072:8Lk395hYXJvMCpUkrbzkCL5ChqqBRWgLSR+Bw0MV3uK6OfBsW9XM1IeZ9Mm+qpCg:8Qq++PqXWgLSR4eBKdZv+zLHQp

  Score

  10^/10

  xloaderpb93discoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    $PLUGINSDIR/System.dll

  • Size

    11KB

  • MD5

    c17103ae9072a06da581dec998343fc1

  • SHA1

    b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

  • SHA256

    dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

  • SHA512

    d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

  • SSDEEP

    192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

  Score

  3^/10

  discovery
  behavioral3behavioral4