Extracted

• • Target
    contract invoice.exe
  • Size 437KB
  • SHA256 f476ca92b53a6add2ab9d1d81e1397e387c15d8bb80e0fe4e768036a091ce96f
  • MD5 13983c4d130a8eb668ea64ff456d5f59
  • SHA1 032d9aa35cd2dc45cbcba2d20e51db725bcb2769
  • SHA512 b6b96e3e492f04b219c8a299e84b2ed4964d5f2a96a8b917989dd886a7abad3a693d36128c29fbd529c0dbc40085cdb0d66e326606bd7128f2643a183643416d
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderoms5loaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2