Extracted

• • Target
    Order Drawing.exe
  • Size 680KB
  • SHA256 59376f91fb0637be9672bb23efc91acf2ef949826c74dfb927146f9799eecd08
  • MD5 0a6783edefd2bdd6db218a6c1573836d
  • SHA1 71d5e7699ac71519f95120ffc617919469858330
  • SHA512 705f368165d75a10777f84c20f98fc8e347122caa11c7fe99ab203288fbce0dc227752a8d8a9f84d417832996f2de34a1738308e34e2642d1f55ac14649fed5b
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Blocklisted process makes network request

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2