Extracted

• • Target
    Purchase Order..exe
  • Size 762KB
  • SHA256 f840b70fdadb374f3b3e6829a5d0ffd76eafb4da162b1be0874fa2d08172dde8
  • MD5 856532151e634510511b4a686ecc3e85
  • SHA1 7a775814e8da28814d135c3225474b214bac9bd5
  • SHA512 7b0b0fd4d268d2597e5c71a9d598fbf0a191dbb1d3af8c0e2a06c6d0bc318147e30a3a82ebbafc01697e0cc5ae819b4c6fc709aa6c7315e05cf599853e903b79
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderb8euloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2