Extracted

• • Target
    New Enquiry 00111721.exe
  • Size 461KB
  • SHA256 59139210e96ea7a1ca64dbb343b225be422bc0d3c66a673959b3e8e076bceea7
  • MD5 f8bf5eb015737153c50d0a76c778ca39
  • SHA1 293e1fe54312d00ee029676abeb29eb947fec461
  • SHA512 5160476707497d288d771b072352545001cb3a67bf2a2158c90daa9b575d9b08cd7b4c815fa19c06d55c5d6a2ee74475d539154c2bc37d7cf5ee5ca96af1adba
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderng6cloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2