Extracted

• • Target

    Order.exe

  • Size

    818KB

  • MD5

    a7bb91a78c6b6272939d6a4703aa1924

  • SHA1

    e746e1443d6a85ea03ebf0c653015f14a3002bd4

  • SHA256

    883418c697628c67c95a239380f1e9bc03d554d5c97921568b5e9c25dfa4758c

  • SHA512

    1ad9bbc9886f7b8f58d2efff7b27801c71ec7017e1315b31b51052a8e0fe3cb815431d7fba3d1f479a48264ab89b0b5c3d51579a3269c1a464f9094ac48efa13

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2