Extracted

• • Target
    DOC.exe
  • Size 463KB
  • SHA256 13c2ff62d1e29d6e88c828851f842b17acb6293da92bdf5223e87a67bf00ed31
  • MD5 e2e027360aa11a532949fb6c013009d5
  • SHA1 2488a833ee33ea4ce3ff0e5e7615e35d647816e2
  • SHA512 240a63a3c245d1dd963cc33b290796e646276f9488692037f26009efde4ad39b9c6af6d0c4d21ca19b5ade4a677b4b2d7e83003a519c2dbfbf408c086ca0f04a
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadern58iloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2