Extracted

• • Target
    Invoice_Payment0000039282.exe
  • Size 62KB
  • SHA256 971b23e89575ff2b47e5639b20f902f7b7ce60b9f771a973c1f02fe4a211fb90
  • MD5 6b4a571b09f5da614c2f903c758712c9
  • SHA1 7da3e76d4b1a16a4b01bfedbed2b809f795414ea
  • SHA512 ccaf37feba7a84d777b8024f4c7dc7ad333d643ff8011e2ceb9c69818832e99154185a0b25e6df2274a1ed83e97513177c8a0eff994acc726f2512da84d0132b
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2