Extracted

• • Target

    INV88272727271_REQUIREMENT_02727272272.pif

  • Size

    245KB

  • MD5

    1a97ab72ef6c22d9508ad78db60ca205

  • SHA1

    05122e7544d6eaa53aaf36cc34aff27a17a192d7

  • SHA256

    947a0f977737ff7dfa8ae17eb2eff4b0ec4b51479c76f12f60d0b8c40ca9d323

  • SHA512

    cb541ef914b7c998913dfe0359a1b42345fc5705f174399c8153cab4e2a6c542d6881ef00d83505c6fbc3b38c1eddf033bc90ca67dcc3050f8d3264caa34ed36

  Score

  10^/10

  xloaderrmfgloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2