Extracted

• • Target
    SecuriteInfo.com.Variant.Strictor.265968.6816.21223
  • Size 940KB
  • SHA256 28bae65cec413f6c0dcb0df2b34f0a9cb4a53ea246de0fff2baee4a98d8551d2
  • MD5 032f14ee49692bfb4d59c3549c8ecd04
  • SHA1 52bbc2452042918efd97da6826c97e28c6cf6d5b
  • SHA512 bbfb39cbd923a1981b8efd6da36834b7b1e2a063e49a26567e2ce68246545d2a8f098006b4b154d90ed9b7849a58427f6305600c9fad44824888e3b7b240b619
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadern4thloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2