Extracted

• • Target

    #700317000.pdf.exe

  • Size

    493KB

  • MD5

    00b8b08c4cb4e862180416e97d5fcde6

  • SHA1

    2fad1a0c6d35b8d7aaf6cede9e5260339f070a0d

  • SHA256

    5d229dbbaa8e7f2584502ab1f3fd82c25504a5bb72ff718d32184dce04bcded9

  • SHA512

    9dc385fe54fa86be6aac85d44b6f30b283655360ea7a3c3bd0a9cd5ab1fdb7b9f23b69abbd7f65cf3a756b848ca55ef9b27dbd956cab8ef9f2b674d91577120f

  • SSDEEP

    6144:MqQJ3h4FLvCp+hJ11j8tG88R3DI4A0rkQklyId9bvLNnnYuWkULf5dq8+hZFBaai:MT0LvCp+hJ1mGBRzHp4dBNYVkkdqtrF

  Score

  10^/10

  xloadergm9wdiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2