Extracted

• • Target
    TT Remittance Copy.PDF.exe
  • Size 758KB
  • SHA256 3ba0da5db0ccdbabdfd7e95fe24a1c43056b77893dc6c589ede0a2a4ba365cce
  • MD5 b4c673cac8fbc1b73f91c2759be8d089
  • SHA1 e2f639474539943cd334b1979e43d605d7377abb
  • SHA512 ac853cd00200a3d07edddf7579ec4ab34e2ae628ba779c3eafcaba63b3b0aaf5a06220f0da3171bc8722619cd36f22696acb15007dc7b3ed72def2ca6eb6ef45
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2