Extracted

• • Target
    Swift.exe
  • Size 210KB
  • SHA256 441a0a46bcdfdee8c8b6761798e75a65204eac43b47547557604f80f26b87e95
  • MD5 66408abe0ad530044298aedaefe97574
  • SHA1 6ea94881f52cdb561c1bd5c477abee8fd915d529
  • SHA512 c9fdcf9554e51ca4bab2b1b6f41346dd60a02d864c8f846ca3e715bb6a0d690a3d0986d1084d88373da41002953f379f33885b9177af1cc83bc0335addff1a40
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2