Extracted

• • Target
    Inv_7623980.exe
  • Size 957KB
  • SHA256 81cbdffd1b44ca983180456d058b8eaadf51adbd19600dbbde68be7a4ef09a54
  • MD5 ac0aafad021d642a83f0e0e00f925160
  • SHA1 9a225f4936ef458a3371e7681f942b7733d8eb25
  • SHA512 07683f8a9d789cc6e29a3ece064df8d9ba8e3d083a13c76cfeb669b75ecbfc0108669c3438a67fb9034a5fb98864680b6298d0c5506046f4d3581b08cb1d1504
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2