Extracted

• • Target
    Booking number#63200IN437668.exe
  • Size 251KB
  • SHA256 c27f841d05e9edfb72b7bac4a2dcd53af09693399e105477fc4e8eb8ead68860
  • MD5 3174d788d8554801720f719d2d693dca
  • SHA1 a7a872e276119f83c29b8cb05e54c1f146aeba7b
  • SHA512 19699fd41f5bddd0b2fe9778cd72a1085e77a80a14fc251530ab4f4b7e3aabb3c0365c8cb5306c872e5df5983c96924d2474e36eceabd83e4cc0a185d25e704c
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderdvcwloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2