Extracted

• • Target

    PO.20586829.bin

  • Size

    1.2MB

  • MD5

    b45e34aecf9c73c7fb54edab05973e42

  • SHA1

    41861a63a47b4d1a70d4d81dbde119bfb893abdc

  • SHA256

    36a6dd99705baa431be4fa3b3d1223e540a171d419b79d0c466916269fb8608f

  • SHA512

    d698e753d4d7a4141c6cfc6e7baa43e551a033cb0ddbc93a2cf229a450f24ef5bf106acff221241928b9612067a9e9eb178d722b21bed5ab9bb2ec54d35132f2

  • SSDEEP

    24576:NyUDWIp7eS8sP60XYwxx3CZswC15rafWV/Nm/y12NhmI:A1ITV9XHSZCjaNyY/

  Score

  10^/10

  xloaderimtadiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2