Extracted

• • Target

    Purchase order 4500447701.exe

  • Size

    559KB

  • MD5

    2dc28d7d605c0da46b7c7f767561a057

  • SHA1

    300f76a7cc13648f00ffb3baa12c51a71adb8395

  • SHA256

    7ed1db0b1bfb7845bc63e83b7408bd8c475f3173cb0942325663cda742de0a26

  • SHA512

    875c7ed14b4b47e1cc56876871153ec3f47374e759aca8e9fba9ac681baf19a96b47233f0159327c37dadf2c9d70817acfeb90e70bf6eda9d60616ddf941375f

  • SSDEEP

    12288:5Xs1g8To3GZrA/XWLXYzTHTpNzfSNmc7seOep6K:dnzpNzqNh77

  Score

  10^/10

  xloaderh6fediscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2