Extracted

• • Target

    so.exe

  • Size

    650KB

  • MD5

    5551346aa9f251895021b95a2a7cc390

  • SHA1

    acbcecf7599d3c33f6f2a36c0947cfc633d0a406

  • SHA256

    9e189d8d48a66d2f53c972275642da7cbc8ad51b20f04cf1d592bef360db50cf

  • SHA512

    35e43a0f2ef1dd2dfaf921d8af3a4f3ef0f4675479d496141358561c84a3b8c8b1a5bd9497fe6c26757d3e6637edab538ac587d73bc6d47e9b90b751abf55ba3

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2