Extracted

• • Target

    DocNo2300058329.exe

  • Size

    718KB

  • MD5

    bc9db631be7e20f026be29b2e1686adb

  • SHA1

    d7c4a3525c2d63a8d347697645bafa83893439d8

  • SHA256

    5e1d3cf402263a798f4849e3f6e668cb124baf2fb385043e5c740d4e7fa132e0

  • SHA512

    42fd217a917f494e3a392a602b619e35769ba12eea3b3ea328bad0e2c6c406909ef9aac9a5ce469f9051f6df3a618ba1443bc6fc80eee6284e34e5f8f977459a

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2