Extracted

• • Target
    invoice.exe
  • Size 772KB
  • SHA256 ef4a9aba2afcd39bbfbce4fde4f5b14869115984d430c2e73353e89e214feaa4
  • MD5 b76aa61a1aa68c1c143e52bf6191e4a7
  • SHA1 bfea883dcce9c7d6d64b8e194800b75890a36610
  • SHA512 da8512e8fd589a707baf87944510853bad531bada4440412569f1e5405734f7d8a046b7d49b4c8f0c9577191ec798fd884819b4e4b8c236f4ffc2ad418467f7d
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderetafloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2