Extracted

• • Target

    E-Invoice No 11073490.exe

  • Size

    628KB

  • MD5

    b6ff5bcf0679b7eb84b8c555c75e084b

  • SHA1

    1d239a9a29f315832324795cb9c9a783bf420c26

  • SHA256

    302f8d5292f11a4fb79650e41ee803bc2a0ff6a79666f39ad6033c4827eacba8

  • SHA512

    147e3656519006209e6380f3a6e01f1011e4db49b4a0569465b1a29819ddfd1b7c3682ed56f82be0553bc7135cf351ad02ceea1376d57b3bdf9fc42e8d9ced60

  • SSDEEP

    12288:C13Su/Dwg9Y0kuBXHyLA5ePOnhEWIlDr:CNScMWSOSRv

  Score

  10^/10

  xloader3voa8discoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2