Extracted

• • Target

    SOA..bin

  • Size

    659KB

  • MD5

    e3e887b84c5ab0b13601b8ca590a0dea

  • SHA1

    27f72392ae8906c20bb76c4a861bfaf2c831f1d2

  • SHA256

    661c9517b7cbeba95cff9523e882193026187caf88ee9073656d475ada90a45e

  • SHA512

    9c2316bc05486f01c1732eb363d71897d77f9c55caaef2030e094faf32b9d4b9b1a94e09acfe8b63f37435b693d68c08d3dbc5efc7a2da0c2c64deb760ee1875

  • SSDEEP

    12288:/QYI9f+dWzCpO1IweNrFyvDlh4ahKzPmnpA7vP7r9r/+ppppppppppppppppppp/:/Q7fyoV+wKrkRhdDnp21q

  Score

  10^/10

  xloaderpba2discoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2