Extracted

• • Target

    61vPFITGkbgCrMT.exe

  • Size

    494KB

  • MD5

    1562a3db939188c19ab5696f83c6e036

  • SHA1

    b3964c733cff09ac94c9b4bc9c1f3d8c985a07f2

  • SHA256

    619ab2c40c40c107e921df3ccd7f44946ab5a353939da1f3834213f3a507a4c0

  • SHA512

    d2f39982222f5b01886e7ff5646b6c1bee44c8b8debef5ea5849235e93b42fd08aae701930f6aca9faff967ccf1c6e4be2c4f219fb0dad5a980b09b4734bd1a0

  • SSDEEP

    12288:M1Uq03gcZI9plKGV05SJlpC//RRoRMQTB1:u0wcZI3lKruiXRmRMy1

  Score

  10^/10

  xloaderur06discoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2