Extracted

• • Target
    Invoice_xls.exe
  • Size 311KB
  • SHA256 2f2ba4f8549cb5de1822f0382532abdcdbd6fc2ad1f2d5120bb4c9f145e84f08
  • MD5 11dd29bb7f2c5cb432b766b5b8dd828d
  • SHA1 d9fc2d3ef2af139ad15773b448ce1250c7262651
  • SHA512 9f33dd9911a99757f6b475a1a6725c980d27d18a2ee30bf51ebe6b0f33a4211e294bfae196ec94c44475b92ec08cef94bc0a53ea0c4180f8d49eb336c12f9253
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloader3a4hloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2