Extracted

• • Target
    TNT Documents.exe
  • Size 381KB
  • SHA256 f49a87b9fa0e2e84273ad690ffe6d7548d7ed13a595fd4addf7c6211b0eb5108
  • MD5 53213cdc9809c6debebe6400a4d1a891
  • SHA1 2383fe2e296a1f28deb600cfeadb0a3fa18856f3
  • SHA512 7dd498aeaeaa092c37adad278b2847d2b7712635aedcdec1c4ecd8789523ba4b9995dc14b7e5c1bf5130f55edba5e611d8e78f621a38c7bba11bf379d3a6f6de
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderhow6loaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2