Extracted

• • Target
    Order Information.exe
  • Size 784KB
  • SHA256 4eae4ef0a29b60c3886d69412e45a908b51eccbdb8b6a8f2590edc9de2a692b4
  • MD5 f7025588aa5cf18492f97526ebdebd7b
  • SHA1 bfba4e17afb7ac913ad7ae084c4d475cb972266d
  • SHA512 1be1f7e42470a36dff14175c6b895f1ac3833bbc2a663eb294d9715b2ed30ef3081280e3141bfeea5128f17198a03beea0f655dfa5a5150d3520b78a20936c07
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderku75loaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2