Extracted

• • Target
    TNT Receipt_TNTMX9886530.exe
  • Size 1.0MB
  • SHA256 a2c0c62a11f867cff9fe7cd1b2597c9a7bb1c268e18e35289d6f7afdb2adbdbc
  • MD5 7cad10b26e1fe159aaecea5fe8db5d53
  • SHA1 40575a12bb459daf68e663c904ca562439b10987
  • SHA512 f5f1c52e3c0c3f8a2657655ab0035b356204ebce4b9cc118e7e9982e273a9e0c1129c0cb281c07a7fdd1f75525cabb0b00e8ca13817b3dc081dada2cd23803a5
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadersj8qloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2