Search/XLoader
● Malware

XLoader

XLoader is an infostealer malware in use since at least 2016. Previously known and sometimes still referred to as Formbook, XLoader is a Malware as a Service (MaaS) known for stealing data from web browsers, email clients and File Transfer Protocol (FTP) applications.

View graph Watch Export
Indicators tracked
0
Intelligence Reports50
50 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium
Connections
33 relationships
T1053.005: Scheduled Task
source
T1113: Screen Capture
source
T1033: System Owner/User Discovery
source
T1056.001: Keylogging
source
T1027.013: Encrypted/Encoded File
source
T1539: Steal Web Session Cookie
source
T1497.001: System Checks
source
T1566.001: Spearphishing Attachment
source
T1115: Clipboard Data
source
T1082: System Information Discovery
source
T1106: Native API
source
T1059.010: AutoHotKey & AutoIT
source
T1140: Deobfuscate/Decode Files or Information
source
T1555: Credentials from Password Stores
source
T1583.001: Domains
source
T1185: Browser Session Hijacking
source
T1555.003: Credentials from Web Browsers
source
T1055.004: Asynchronous Procedure Call
source
T1497: Virtualization/Sandbox Evasion
source
T1547.001: Registry Run Keys / Startup Folder
source
T1055.012: Process Hollowing
source
T1685: Disable or Modify Tools
source
T1203: Exploitation for Client Execution
source
T1070.004: File Deletion
source
T1027.002: Software Packing
source
T1071.001: Web Protocols
source
T1622: Debugger Evasion
source
T1529: System Shutdown/Reboot
source