Extracted

• • Target

    Payment.exe

  • Size

    1.0MB

  • MD5

    91706d95a9aafe3c99f742e6d476fd66

  • SHA1

    2b69023fcd198efe36909ae031726a02966c30a8

  • SHA256

    4c5ba895d47529032c749f81ae5f8ffba7fab5493a2bd33f699c0d05aabfa080

  • SHA512

    0f85a0ee382f0dfd02da27e52a0e4431da723aa99df88c8d78b92c0bc104c1282dd19841216bbd5b264df6120ec490e090bd5b7fbdb093a6a6fc153db510f23d

  • SSDEEP

    12288:F7Dc9F3nC0Py3gAhPEJbjJEKFWxqG1ICxlLokn9z5ab2NJO92dJBfOjpkUhXRxOT:OY9jlLokn9z5dg2L0GUhHl1OMayg

  Score

  10^/10

  xloaderudewdiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2