Extracted

• • Target
    commercial invoice_010202201.exe
  • Size 238KB
  • SHA256 73f458d7e38ab748b7b7d3b3e680db9eb08d845c1b1b7c935a6ee453d8f03358
  • MD5 acbc7357e4fb7d8d4874ecbeb0c5bd0f
  • SHA1 f423fed0f335e5c31d7b799aba25469420fb6009
  • SHA512 f492401628f2970d3a0056091aea7b7af9938da1d885e0f1a2946f3fed84eb8d132de8f926345791444de7c72c8adbb150d19cd5f81acc8fa1a043d6b0edd17d
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderigwaloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2