Extracted

• • Target
    vbc.exe
  • Size 297KB
  • SHA256 4b50745e74fea6faa516b4d46b7c9fbe36fdae2301b76ec940635d033707a2c8
  • MD5 1624595e2354ff7be9e7dc6def2ed69e
  • SHA1 1dcfaae594e3690d3fef5fd4de855d02e9cbb2a5
  • SHA512 aebd6e6d28ecab56e48b037836c2ffc573a8493b576ea3b59ac6932c6e782fc99ad1da7a67a231830a2c4612c89e24f0e7f483d24080f29d6133d81c7207971e
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderm07floaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2