Extracted

• • Target

    PURCHASE ORDER 72121.exe

  • Size

    661KB

  • MD5

    a5964d858bf1688f2de5746ec08dabf5

  • SHA1

    26e09b1f04394ff24d59c353c0d46b54afd8d363

  • SHA256

    c1ac4c50a78b858365062dc71a9fe5f3a3bdf39b4d8902b1f8311f2c2a86064b

  • SHA512

    bbd68474c00caaf56d82ddc688d6e523976b020736ab848683fcdbc5c647f36e52121b09866540bc3253ad4e86bc260be3e99886fc519a405e04e24ac13d4bb4

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Blocklisted process makes network request

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2