Extracted

• • Target

    Payment_Advice MT103_PDF.exe

  • Size

    1.3MB

  • MD5

    73697bb26242562cc3b9fde3de369fcb

  • SHA1

    7551d770c6358c3ec5483e12882a42eacc12e854

  • SHA256

    6b63415f87f97a86a998a5b78bb16953a25b6a045df9a8593432169ec65bcaaf

  • SHA512

    f1838d11737b8501b73c4afbe0d5b3fc3bf4ada6dd894985edaf707fc358a9ba24a291407eb1fa15a95a178df886469536e3a3994486d9c9966814851099b2ee

  • SSDEEP

    24576:wmpZ76DOqfx8Dgyfx8DgM1dUEOePbzE+XsdainTlQwDZD2L:jZ76v58Dgy58DgM1dMeDzgaiHZK

  Score

  10^/10

  xloaderearzloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2