Extracted

• • Target
    RFQ # J-003422 88668 .exe
  • Size 467KB
  • SHA256 83e2d139b07165c8ee6bb9253d4a1df920ee6cebaa0d5bd16723848dc0c5613b
  • MD5 e7a674525f43b6c43b2adb53faf6266c
  • SHA1 6728ee883c98f5b4bb5070a1d840e30f7812c7ce
  • SHA512 852d549eabcd0c5c7f3f3a322d58719d38857b8c98171cad78a0752a17746ba9699a6e46dae1964939a25ff1572827dc0a9e155e303ae93fac095f792580472a
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadersj8qloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2