Extracted

• • Target

    purchase order # 3061552371.exe

  • Size

    690KB

  • MD5

    d13fe90ba28506d6da905387249bc084

  • SHA1

    ae86ea40fa1532425e7af51c4356a07d75303f91

  • SHA256

    33a9702e83888498799c0144e3a3ac06e095aa452ce066a02a3860dcd90d6bb8

  • SHA512

    3063e00f6081bb3e0305ddd828953bef896514a38345d1322ba0b39cb566a7969007c12574b75fa06811da06f4aa0dc5cc40756a568107d3da1c51e14702b960

  • SSDEEP

    6144:xY0q7t5k5vNbHSEOJZMtqEZr4aqiCXbwX1wm2D/o8StukFUgpx7kGclFMWqcaP:iQTiMgSF9CXb0B2YLTpNILqZ

  Score

  10^/10

  xloaderimm8discoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2