Extracted

• • Target
    GPSCHN202109144.exe
  • Size 653KB
  • SHA256 0ce4e2f71989e9a0a4aef640b12237135e2be4b037f9cf533ca7925224e9daa8
  • MD5 699589bd45b3cfbe2800dd137a56619d
  • SHA1 c7a5efbb84d4c748556c38c39da5f30fddb4a1a6
  • SHA512 8c073234aa0d08c1d6d2fd2e1f42eaa2750cb0423fde65dae8be9de525e69be656ebb7f64aebbd89aa3a9369bddb76ad6c95518828550de966c8c00b17c29680
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadermqi9loaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Blocklisted process makes network request

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2