Extracted

• • Target
    PAYMENT INSTRUCTIONS COPY.exe
  • Size 533KB
  • SHA256 65a1476fde2b2c018f8eaa5e96a77156baeb6f35bd46545db8745fa4fe0c4869
  • MD5 51c32b446180f49c6b6537a25a191b88
  • SHA1 5a7187ad9215b34c62f96577286e01cab0436acd
  • SHA512 e622dd78122325b22e274238c025d3dfa0577b35ed1509d5fcdc3717a55484326377bc47541ac5c050183f1ab0add718e62f050d1ff1cb305f31c403749737dd
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadern58iloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Blocklisted process makes network request

  • Suspicious use of SetThreadContext

  behavioral1behavioral2