Extracted

• • Target
    PO889876.pdf.exe
  • Size 916KB
  • SHA256 ccb857bca12ac7474e7b496a4cc5301cd37a71825f4b9236044ecc7906bd0def
  • MD5 85c84d3852f42f1dbd665e494e83f666
  • SHA1 656c3ca7a2fe33b7c773c033e6787fc40b77523f
  • SHA512 5475d8f45c6305ae43c6d2037c78f747aae99e58f9148ed5acdb4e0f7a6f3f0f6eabacea88c69ce4bba79af05036d743b805af2ad4443739b1a55612134eb68d
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2