Extracted

• • Target
    Purchase Order.exe
  • Size 1.3MB
  • SHA256 b2fa4bbff4b67fef522c3b6cbc3a98b0c2f463045f19af5f96ee7a3c48ea9f93
  • MD5 06229c1ff976866ca5e36c03343ec91d
  • SHA1 2393badb386e60b5a171b8717694a0b95af96436
  • SHA512 4ae0b51e8b95ac1fb51b71b8d59215f14845a77dd3a42d0390dd6e8f3190f3f621eb7d5eba49e56c6ac124262ae61ce926aa975d6f9bed8ff970c14f5c4d2245
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2