Extracted

• • Target
    Orden de compra.exe
  • Size 681KB
  • SHA256 7ef8b67819945bc8f480ca064b5e3f5a330b6744d47d24b5d1c0214ca65724a3
  • MD5 7bb6534d48cb908418db46a811424d7b
  • SHA1 0d93b70351e4d3d168dff01aa482b754c893d06e
  • SHA512 de6f6ebbc65edc21f030cc6dabeda0c21963c08e9db285df9482e1f3f290b83d8f61542882666c630faceb84ba5d6187093d7c0456cb5d1f701e5f8ac68ac962
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadereuv4loaderpersistencerat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2