Extracted

• • Target
    New_PO_#YIBHC3892900114-03-2022_Evaluated Copy.exe
  • Size 683KB
  • SHA256 8db76bfdd2666649dc2be8ef188d9548971f1edbe4d45c0d689a4700f7ff8169
  • MD5 a6a337c21917d2d2331a8ea9991322fd
  • SHA1 2e5ec60b7499b4af71df8f0d15101b90b3a36ddc
  • SHA512 d3cab19ca56d89425728a07dd74ed8114c9aa3c224da2ce4a085338922e2379e4bc3718db2d3e7b2a626aba451e76e36b063cecf3fe519091a897d283339b6b2
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderasfvloaderpersistencerat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2