Extracted

• • Target
    Purchase Order.exe
  • Size 661KB
  • SHA256 b696aa2ab2bffe77db1a4623aa2769e7941af4ea6286f026ad09365180dd54ab
  • MD5 9545719421db1d6a54358433b78f12c3
  • SHA1 2500f40c99e21fdb99b42a3d3cd38662b204cb5d
  • SHA512 a82b9a5fe20b1cc0ab109559bf090b1de2563f497aabb61e822aa6533ea688afe9a6e68892674d54b1d0c21cac7d8b0fdae50e08c70feff3e13efb4da5446e58
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderb8euloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2