Extracted

• • Target
    Bank Swift Copy. txt.exe
  • Size 630KB
  • SHA256 2bfa8e78bd3e83e2f442a4c560af71c366044893a85b15aff2f3d7d4c67636cf
  • MD5 828ad4d2f647887a2e8f7be514ea4ada
  • SHA1 14870365a5073a63ed74fffa56e34181f8db06eb
  • SHA512 e30649839713c647bbaba86ddb380746216b17acb0835d6a8614f376d881d6bc6a5c2c15ce850002ca8c26b2653468eae2aba86c20228c51fc215581e2dc55b2
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadermwfcloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2