Extracted

• • Target
    pounds Payment.exe
  • Size 1.0MB
  • SHA256 2fd3db9eb65d7a120e24e7245a73e4e88d4b2a7998d82986e8b2e2f20af1d932
  • MD5 98dada216714b7a1984e574ab802404c
  • SHA1 614b15a9f514bf12c87967626eac1a9ceeb86ec0
  • SHA512 a81c664c302d465b8db8315c3e5308b73bad1ec06af146c5b95cb336d505c4e87e3586f1b24a63c165f23a38dddbb8f767bc1c5dd6eb2876bbb60d6af146820d
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloader8gceloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2