Extracted

• • Target

    Purchase Order# 210145.exe

  • Size

    1.2MB

  • MD5

    943c2878d92004d2705f0d568838620b

  • SHA1

    c134f3cd18715f1451f48bb10747779609284362

  • SHA256

    30b8f5e97d96ca11c0358b295e60a3dfba91f6eeaa616fd6f1f616326cac8d63

  • SHA512

    cebf61b3e58038e90d4f1846d46ab069b9da8ca2715eebf0b5ce8330924bf9f905013c7d5cf34f5790efe4ef726a56c56bae33c032204f56aadf6eaee5370e6a

  • SSDEEP

    24576:jyvWI9raNq5Kpi+0IMTJVd+7J2Y9J2WV/Nm/y12Nhml:jXIFaNI+0zTJr+vcyYA

  Score

  10^/10

  xloaderimm8discoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2