Extracted

• • Target
    T-T Swift Copy.exe
  • Size 1.0MB
  • SHA256 d9ca56d191efaa8ac5beee52f508082d6e8efb29045bb61c23851537982fa6bf
  • MD5 a3127d76c37d53a8ecaab821ce5d99a6
  • SHA1 fe6529ff55514634d6cde730e4c4c5b664b02ccf
  • SHA512 503fb1825dec1a108b4c307e561fb4df829079bf53dec6167b28a0c79d3da81d188439ebd5590ca2ad24a528d1c63e4dbeaeecd516be5665866bdc1f07d3e2d0
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaders4mtloaderpersistencerat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2