Extracted

• • Target
    P.O.exe
  • Size 207KB
  • SHA256 9b70fcd07ba7d3dcef17f3b28cf75e304840a67e8611dc149744215f8483066d
  • MD5 eb71efe60cabc2d6aa9a49a82a4ded77
  • SHA1 c188402835e985adac142eee6e0b31fd4c0c0ae6
  • SHA512 3654b1ff3b57ca883b6fc6d086a8c90654f3e59f2efbe7341677ac85216bc8c1d2bc448940081eb9852f10f43a51d71f4eeef05445e046b9726108f792bdc1c2
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2