Extracted

• • Target
    Payment Confirmation.exe
  • Size 945KB
  • SHA256 52b0438a43977e210e58786f139697a9007854f624d8901c891a9af69b87667f
  • MD5 02b89444a1d633c44e1e9e54e3fdd1b0
  • SHA1 6d560a1c41457fa9c88d5d218ea4a9ae670fbedd
  • SHA512 1521d912a90f74e46a6428eb4ee6bdf7561ff05260b9243a34e724b9be1424bec2f7c78ea527097a3d75f349e5afa485bc9aeb159d6186e1f621e462eacda5f7
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderearzloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2