Extracted

• • Target

    qt-64647euro.exe

  • Size

    376KB

  • MD5

    c7869904df7369ecb0e07caa879bb981

  • SHA1

    f35f9af1d4cb23da445e03a9763663790aeec6f1

  • SHA256

    078e4b00d3b4cf59fcdb2ec643fa91edb000419950a3e5ac973b0ed0c648d87a

  • SHA512

    0453ceb6e22b5a0449af4a17a0ea41bb107328a436810339061f9b3a74b5b30cb427c61671199248683db145fed7fe8ded88e836191b27f6ae3db07e1bbe3122

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Blocklisted process makes network request

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2