Extracted

• • Target
    Split BL_PL.exe
  • Size 688KB
  • SHA256 e94ab3e9bc6dfb0889e82075cbef674de3c160a8d4bbf9b3d596381bebf492af
  • MD5 fdaa7ea645b190b5049db5e11ee65456
  • SHA1 c96956ef38e91160217379b008b4534d5c7862c6
  • SHA512 95cb0f1614d065db83e7ac94f9fb3587f02d72118ce2b91e7480eb801b484acca64a388eb1e2c944abdc069698d4e888307c1a2d534bfae1fd903d34a577ef9f
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadermej0loaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2