Extracted

• • Target

    QUOTATION REQUEST.exe

  • Size

    728KB

  • MD5

    64af41000584694858d0fcc37b1bf69b

  • SHA1

    707c77c61fafdd736c1e02bfdbc8ce7ce24cc759

  • SHA256

    fea7b692b71803eb020f04ec1a5f8118f5845910d9677fdb4636d9a7d209d0fa

  • SHA512

    dff4927081ff280eb4e707660c596adfbf8ada0f02cdbf8dd2414cb368b8036708558e854b892eda7dc0049c11df6ff1044cb0ec7c9ae9a32851ba3790fd7177

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2