Extracted

• • Target
    Swift copy payment.exe
  • Size 837KB
  • SHA256 b5ca813a9176c8f6eb9394308c56858d9e27300f9c5a75c82eceae96b8defd83
  • MD5 2a435fc967d5178a1d6377a07c833b68
  • SHA1 61789ecbc2362ed7bb80eb2e86c009b889585987
  • SHA512 b5f66a524e0da56fdd863ec035a3f6339dc8ae911b67ac0d75dfeecc3f908cc430dcfbbdade002df81b43c439ac0d397e3bf339cc5f36cf589b502730e11b726
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloader6dmqloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2