Extracted

• • Target
    Purchase Order.exe
  • Size 642KB
  • SHA256 c6ac2829b2373ca2a1eef82c5fa6f8bc6dbf304ef77aaed0a9f9e2f27db9993b
  • MD5 f785ccb5160fd6d5fc1f25c826e19853
  • SHA1 6d072fe57d64b776e0c571b82c2f34dbe6e79e67
  • SHA512 6dcc7e503c834b44480e87dd9012c9c9879301af4001de049771d9e90a673b48f189156a5d7b85bedc7faf2ac1456a89e98ae17fb77e59c34c2aa97f52baf544
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2