Extracted

• • Target
    TransferCompleteUSD30000.exe
  • Size 842KB
  • SHA256 63fef1355c2426329defba3c5fc037b68085c45196ab8bd7ff2991b5dcfc80c0
  • MD5 5008c7dc12c3366afa36ade61ede05d8
  • SHA1 fadac06e4fa1e5ca209681b42d377eb170d31368
  • SHA512 9e1c2a17d046a53f631a918308c5351397aeffb7f16b3cc39e5d9b357b909263cefc0c3f7a0d37a46947e1864dcc581241107dbf5980c2f30099153b33b5558f
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadertee5loaderpersistencerat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2