Extracted

• • Target
    Product Inquiry.exe
  • Size 633KB
  • SHA256 b830b088dcc04db74fc8afbb16dcfff0134c405228be44df5d996a9a5b254bff
  • MD5 33015d1e560700a10ed7a067a13cc262
  • SHA1 c5d391685efa94cf3ca9f7d0be5b802a308bf51c
  • SHA512 b8e79a33ad5090ab23a003099ae88b884fad45259125d379f8e67608f89677a0d294a2176e8a6eeaef36af94cb0c6d331864ef72fa45cf4d4195292ebd6c1c7a
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderb62nloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2