Extracted

• • Target
    Purchase Order - SAFCO 110172021.exe
  • Size 979KB
  • SHA256 b4b82d2154aa722ebcbc554e0be9beb41d9af35b590c9e72793b6e59bc389e62
  • MD5 195cc68806025af169e06d84e4511ea8
  • SHA1 b3be180b5930528eaf659b3108242911f8230274
  • SHA512 dfd49107922e089e69b0a75e8f523c5bf5a14fa2e3bfc45bf4d7d77aef641aae3aa12f61ac3aeffeb3bcea460c20a6cf6ffb19eb82cc97c9c1e26355e188a4ea
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderbus9loaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2