Extracted

• • Target
    odeme hk.exe
  • Size 241KB
  • SHA256 7889cc6835fa2dad91efec45745239704b8d8ca2932ade574e92b9c28bf348c1
  • MD5 15081733bdf5f7905acbd5c7a345843e
  • SHA1 331ccc05d3464742069af263f507931e5eeac1b1
  • SHA512 368d0ac3cf78688a8f8900d78794bd0102068aacebb19b64ec17229000d357b82e9e15daa0e2f7a99c8ef2ee5e90dde1830d2440eef3fdfaf194ea71fdfa3a65
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadercbgoloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2