Extracted

• • Target

    REMITTANCE COPY.exe

  • Size

    1.3MB

  • MD5

    01b0dffa7c000f4d55544eb38f8ab238

  • SHA1

    cfa6ae5441f0c41d5d92e0fab0eb90b44e0d621e

  • SHA256

    f1540e89eeb7046cd265d37ef63a6d282a1ff8a89875193ae775582e74205594

  • SHA512

    d55c5d8e942d5dfe74a4ece63b707fa2a6f5d8551ed268d08eab9258ab9d91371d13a2dd447eb860b71bcbb125d5a1948b61bf40a2b7321dde7d6d2ce83cb526

  • SSDEEP

    12288:5pYu9DAwfA8sL+zAFIKGuGr54y6oe9xNY4XCQFY6MkP7r9r/+ppppppppppppppZ:5pYu5APdKzAFbGT6yz4XLFYfk1q

  Score

  10^/10

  xloaderc2uediscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2