Extracted

• • Target
    Document.exe
  • Size 688KB
  • SHA256 d5a3b850dc0e753c98a4ff8d4fdf8c8cdd58b0e134e741db5a34b47e7accf0cc
  • MD5 61498fdfcfdec5aa4d99e775e58142e3
  • SHA1 7fe70bb27f8d899b9acf3765fdb92782f9c0a9da
  • SHA512 7f9f7df2bf02d598caa3f66dfd905b151544aab42a992e7aa2f82d6c29f24089cb7d5eff14f23b529b9f000d1a0331c4145c67f409dc3f7fad69ca2662da4463
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderfshhloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2