Extracted

• • Target
    PO 3003786473_pdf.exe
  • Size 417KB
  • SHA256 37182811d9f3a0a2b3126266dc70a5253c4745de7e18e75a4c29393fbdedb142
  • MD5 c83834aa6525f1d8d862e6fe4f3f0fb5
  • SHA1 1ba5d0c5d596d7cdd2fd061fe74f2b332f1dcbb2
  • SHA512 956271ad13299cd3c17e7bac5ef16e7baa5aa53792a64a9af1c42db74c3ee6d14074a36d83d6642cd9ab642c6f7c3b503326ffc24e693df56025a447eea3ef11
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderb23kloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2