Extracted

• • Target

    New Order.exe

  • Size

    208KB

  • MD5

    e3ef839d952e85b861b7b15faad53f8e

  • SHA1

    feec9cf7cd91f7d3ba245388ff4655f5b3aecf21

  • SHA256

    d3501787751324e615bd13ed80417360fbd7558385662ac34c51b34802f9b9d4

  • SHA512

    91b5018a2fcb8a758f9a4d76a005095035e7f90b91d71eba345e0f3ab625c4479172e5b580cac4713643f2162feacfc66a7a983d32cf0c7e47862862a956dc5f

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2