Extracted

• • Target
    SKMBT_C224307532DL23457845_Product Order doc.exe
  • Size 213KB
  • SHA256 1a91deb8d42e066f792fed5e4feb0dbaacdec1a052f516e1287cf9625a8c9684
  • MD5 140563696e04678dfabe06f171c7f1e1
  • SHA1 4fefe830026f2ac67a79d2dd883f15dcf7b96d17
  • SHA512 74760b25a0a9bb27cea6cfbe19f62ca3c137fb5c72f8ed81d2d47ebd1bbe8bda8be9b6fcbc7e815539ddf99e7143d954129238004bfb13f0f1aa670e03b580bd
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2