Extracted

• • Target
    PO#41000055885.exe
  • Size 614KB
  • SHA256 ff76b56bee6607aa59a49b6b5ef4a27b73ad17df228a1d408ceefc810ac74e9f
  • MD5 1d4e4ee2d0a92c53c7fce63856b1673c
  • SHA1 a6ba93e1f1a03ce02c061b58df8bbaf2a6a94dcf
  • SHA512 eef8b617aa67600317202fd4af6f364347aa60ac8c6bbb6308f4e38128e61afcf65b9c1b155f05ded3aecebdf76f9758a2a9c88d80cb8e764343b1197e907cee
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2