Extracted

• • Target

    Lanco,pdf.exe

  • Size

    245KB

  • MD5

    d539972067e967998d09d0a2f1b31b52

  • SHA1

    20fce9b0e4e0f86143dfba1259b0293a32d74cbb

  • SHA256

    b36a2901bfafd8723bfddd0388f65b0a46237b063ca33edbf773bb589f929981

  • SHA512

    ffa91ce8a780bf1a8fb9f2dba0d5fc74744c82a600d6890acafeff6610828e6d8da751b34cb2ea46558c9a2387c66415c82c254c6131467546fbbae19b3bcd65

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2