Extracted

• • Target
    Order Drawing.exe
  • Size 532KB
  • SHA256 68fa77befde4e147cc7bc2fb142306a94245adb49c4ccca175f12f29414ce3d1
  • MD5 5ceb8db06412b0ba9a81fda8edbf7c6f
  • SHA1 5bf7a8425a33b41f495c37b42dc8689ebed1cac8
  • SHA512 3ae8355a14f82544b35b902ba159802cbb88ed8c8001e83845256ea57d77dd185ea595c7056c55bb87a0e0fc5ab5b0c1a751e5623e00ab585434102bdc65a23c
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2