Extracted

• • Target
    swift copy pdf.exe
  • Size 653KB
  • SHA256 a98ba3cb7eb936b7edcf60262bb5b78f8584af2f7b41423a62f291c804ef9252
  • MD5 de90e38788b5a2c88d2709074d1d54fa
  • SHA1 f9c101ae2bfc8606f0a1757d83f03e96338f0bcd
  • SHA512 018981d93aac3d895f68685709cbcfb7b779a9c71acd7bef63e913f4bb551a156a2117a76a436bf1536753d972a903626c31ca2e1657b320c2decb4d630ba058
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2