Extracted

• • Target
    RFQ_Beijing Chengruisi Manufacturing_pdf.exe
  • Size 757KB
  • SHA256 662ae2a76488e0f775884f0c19daa286c910f2e72acb414a5f820b655ef42565
  • MD5 662ccb9b69a33a02460b368c77b17f04
  • SHA1 9c61fbf1b27de772aebde4825a66b6da8bbf7517
  • SHA512 86f125976f1ef582afa3dbd289e2a369a14ae940401dd967bb9c5e262a53a1479bda3dad2a268f659eb901aabe3e4759c20c6968d0d1f2b9517b4577850b1fbb
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadereuznloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Blocklisted process makes network request

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2