Extracted

• • Target

    RE New order.exe

  • Size

    774KB

  • MD5

    752c086496f2301ef7e95cc0a710c786

  • SHA1

    9cb8456136462d69dfd073b43707fa9eee7d09a7

  • SHA256

    beb1862a3b194a840605b7f030f0285fff18fadfc4199c3da007f44b7ad19292

  • SHA512

    d9a4a2bce07b613ce55f1cfe085faa5a1381cb0fb60f7d80c0eb7c279bbadb5e2f949adab5ed488ffaf238f5963b3978d4483bca40dac556ccb1aed4f2002a39

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2