Extracted

Extracted

• • Target

    FACTURA.exe

  • Size

    259KB

  • MD5

    dbe8f4544e6c99ac9311d37139150e9a

  • SHA1

    14da5f434e987b372a2e783d49134877bcce9ebe

  • SHA256

    c3192d94f1b44c9c8ce94f3865d88b1a169dde10f3dadf3a517c3de34487a5a5

  • SHA512

    25a785d5d9cd19bf0e9805dee79433140de4cd5fc3384e292ec6421089f0560fdb44fcb0a2eed8a2774f9d3a89a6c30b5cc1248756d3b44125e478bc991e8a41

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    URGENT Request for Quotation.pdf.exe

  • Size

    742KB

  • MD5

    2c06382d5825ffba5cbe2e40c6b3c60e

  • SHA1

    8b3b2f5a7dec1cf208abf3409cf13c1216d2edd8

  • SHA256

    193f9577a84d3863b8499fde73484d510ba4f4235b93ad2d25195f57f78bd7ef

  • SHA512

    39119f150e7cc8cfe7d9aa6cc96e9e1afdadeafbf7dc026faafb7c1be6175adc89a0e54275d3cdc04d4ea724b9a96a11a77c986c43662e6e8abb2ad33c69e367

  Score

  10^/10

  lokibotspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Suspicious use of SetThreadContext

  behavioral3behavioral4