Extracted

• • Target
    PROFOMA INVOICE NO2021TD24.exe
  • Size 993KB
  • SHA256 f7c1ecf2c6e90d8a9a0ac0972b0ab02ca809a85da65d51b46f56a4c81cc4996e
  • MD5 ee10aa40ce9a309ed5311465c3c8ccae
  • SHA1 42f88403038ed536fa7338b8613ad5e790e4295d
  • SHA512 4904e4125a8e07b94314d899418d0a0b809108f6597796a0693ab8770c78113507e1c94449141254c94471f91bc481ab6b903437fbc0d32ba8ee6f6abf316867
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadersseeloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2