Extracted

• • Target

    PAYMENT.exe

  • Size

    1.1MB

  • MD5

    d639a70d7bb8cd136bc920a15ac2a5fa

  • SHA1

    4ca0f11ba335654fe8d7dfab478202eb3d90e337

  • SHA256

    d3e580c4794a5e5e50f2334e3ecba635ed049952c30be08f283a72e299f64f8b

  • SHA512

    9a5c45f99c7e02a6965f413c3df9ca6408c24e0bfb934595199a04f899ce4bb02cfd3288b845cf20dc664476a889dc32c5f7571f07acdac93aca3308a157759e

  • SSDEEP

    24576:/Fozo5ztlrUM4QgKtGoIay1vcrP0lPn1/0S+7n4SYtqChJ+hu3A8K/dwiGY1iQSQ:/wojljIKzIa+crceGP

  Score

  10^/10

  xloaderf4utdiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2