Extracted

• • Target
    PO_0065-2021.exe
  • Size 448KB
  • SHA256 4ab9d09d0ffc49408cb40fe30791e2dbe7d6ea5cec1d44d509c0032b7b0322c5
  • MD5 a2c690dc3d1da6a98282fd80b9385d19
  • SHA1 1fe68b6982326a109f71c4c8fa48f101ed190370
  • SHA512 c7fbb08e7c69de9cd641e0da1592cadca296b569d97b72bb157530af11599560a10297ad39404c36d883749d8de913a777123625c08d7b68ecfbb00d14459358
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2