Extracted

• • Target

    28ece44257b98a27a4bc5ca9f422e009c9679db1d5ea4fc768a04b8b0cc37d34.exe

  • Size

    547KB

  • MD5

    10248fd5a16bb9cebda2d4547c312f87

  • SHA1

    a5d4df6e94552a5b06713aeba7730b10ccee3ed5

  • SHA256

    28ece44257b98a27a4bc5ca9f422e009c9679db1d5ea4fc768a04b8b0cc37d34

  • SHA512

    920cd71f042d6ef2b9a057b42682ec81fe96146deccfe61462b5feb4c5c34b90d8d8e80423fd061a9d330acb701173634d3b2a9c70cd3925ec2e96affd6a6378

  • SSDEEP

    12288:AFU/GqL06WYwJMEHoccFE3n4wt0WBxsxX:AFURQUzEHoceE3Tt9Bxsp

  Score

  10^/10

  xloadera49idiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2