Extracted

• • Target
    91JadopM6BYFF0K.exe
  • Size 786KB
  • SHA256 9d144168607d4e6808be108cf349da625b911307dabab1ea645381a5473deb03
  • MD5 21c467f17b35432b0e6d384e09e77e5d
  • SHA1 1fe28204941a586998e721e8ec4df57a353f6b05
  • SHA512 beeeef96e336d62b01c7ee589aeb05650b791f50af7d3e5273b531ca297fc90cdf72dd50bdbb7bb53e302ad5179699aceef3e98ca9cd6fef6edfc40190f520fd
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderwdc8loaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Blocklisted process makes network request

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2