Extracted

• • Target

    INV15420.exe

  • Size

    42KB

  • MD5

    a17204c4cc765969839d22f78bc125bb

  • SHA1

    7f29c80d2fbc4c4a73f65684fb689543e202d684

  • SHA256

    109bfc4f1d73233b058db08b761ad7c77a7bc43bfe2b10a71614e536c2e89d3a

  • SHA512

    950daa0ff2917f37d71f84bcac7df96c856d0966338b563f480c92d59343938441be0ff93d8801a4dfdc5a4542b3f5b39a5ee9926e9be5b6a498f7e372da6f91

  Score

  10^/10

  xloaderahc8loaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Downloads MZ/PE file

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2