Extracted

• • Target
    purchase order pdf.exe
  • Size 776KB
  • SHA256 042afd1bcf79f7231ff41744fef68a03c0ea372d2fc4734f2ff9f2954b112e7c
  • MD5 4d947eca1fcf3426dbaa5beba31f6ba6
  • SHA1 856e3283069f7fb0d8e0e040e265c4d7d14cd836
  • SHA512 42cdda2b3bea99bc3be14a20f0e6ff8a7bf02283d94110456a05470dd5f8755df0a54ea16e494be02d4cf9fcf819d942b011bd3de3ea06092d80a9d1536040ef
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2