Extracted

• • Target

    New purchase Order.exe

  • Size

    889KB

  • MD5

    69f2093d0e8722210b96012212776ece

  • SHA1

    910fc996781777fe1fce27b115914e6f82097391

  • SHA256

    65d63079af57f5ae33cb341bc94f3882d2516efc82a0373775c564759aeb862e

  • SHA512

    a05aa45f224b03a849bc488677fd79b8b251880c154bb9c0f9ab58de5deccf785b121f8f35ddd175329de09ac1d1e4add884203c71e6c4f62b470a075f578d47

  • SSDEEP

    12288:E8YiwqWQPm3aCdyDo1G4EeyNvQDTMiAZeZgAFYSiS/FUY22P2BHX/cM7gJELRpet:E1iwqWQadyEs4jivSAi04gAFYk

  Score

  10^/10

  xloadera8hqdiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2