Extracted

• • Target

    WTS-SOA OCT21_pdf.exe

  • Size

    541KB

  • MD5

    3591900fe0a5aa6d4aa7333dd8fa2087

  • SHA1

    6ad19947aaa288adba42f0ef78da4679a713634d

  • SHA256

    1dd7df2847fe97dcf3a982796de329170823badae79b8342d5180ed5a11633ba

  • SHA512

    fa0cab7da77825c50dc5963d505fe7aceb8ace8f7236190086488b81643a81a6c9b156a90e8045533c421b81175dbed7d583f28d61caa144fab61e9ab350bb5a

  • SSDEEP

    12288:O78H1X++lTldtyhZ1g+KqRfoCoE40BhwFpCke:t+KT6Zajcon+gpCke

  Score

  10^/10

  xloaderxc52discoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2