Extracted

• • Target

    E20210917ML-RFQ.exe

  • Size

    631KB

  • MD5

    4bb97838f22e7d33122a38105b252b9e

  • SHA1

    770a4807a1e32a8fbb765e3540d54c30bdd5c131

  • SHA256

    c507c6ca8c3d71feb2af8d83136736bd2407fef4a26c9e681426be5501d4742c

  • SHA512

    fd23aa8b75501d5a09fcb6c8c4ac2bc7406e0a73a7dc0215b3a1de8a4a31a418bee21fc750335c9de4652e62a7a9a4a409bf110d9a1bc49df9318ab38ba08cb5

  Score

  10^/10

  xloadera6erloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2