Extracted

• • Target

    958db47a4769c917239ff91dc25f4a09fd05ac2dd92c9b2eb11bfbd19832b550.exe

  • Size

    461KB

  • MD5

    b6b72695524b77e6a03efd940c89175f

  • SHA1

    86a3ec13c5d907ffb475404712fdc7b95386c48f

  • SHA256

    958db47a4769c917239ff91dc25f4a09fd05ac2dd92c9b2eb11bfbd19832b550

  • SHA512

    3a0b61da34c0e77109b0cee9b331258bece42451017d413a62bff330494155256e88fdb1e2346af0e42e73704c6d3341eacd052a5b45de0ff0beae5722b11755

  • SSDEEP

    6144:UfHlm0I6Uqd2GhNoWnti/tanHwGslCmeMPSeKsyLGjloc5GWBqeq8Q2z:UfFZUi2iN9NH3wR6Ajld5G0qf8h

  Score

  10^/10

  xloadereuzndiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2