Extracted

• • Target

    PO#10244.exe

  • Size

    717KB

  • MD5

    c4192fc5d072aff733b9c9e3b5d165da

  • SHA1

    2c4e6cae1c3ef562452cc4e6caebd6f5511bc11a

  • SHA256

    a42564801d666f9a210723ee247df72d71d93274e7556920957d5a98b237ab2c

  • SHA512

    c59d51540089ddd00309e328620f11386326c1687a8f2e2318e42f2fbda93d66a0153d5493971ce7eee8f624a61ef52295e729438f1d41289a393ada9f4b3613

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2