Extracted

• • Target

    Order Specification Requirement With Ref. AMABINIF38535.exe

  • Size

    558KB

  • MD5

    ec44d0c4ec44347f9f8ee63b4bec5210

  • SHA1

    362eda0fa5bd2cd4f50d0f7e9cf0cc641a08b163

  • SHA256

    ed6182df3469dfdc4084aea0aca3714a90498401d608c7a0ab818329c42ab21f

  • SHA512

    ee7e79980421b97fccdbe453c5daa98798fc82e8951c3d6aee49a939a1721e2c885ad22c69721488644f277e719d60d2fd1a8f595ceb370d29d899bbca7e1338

  • SSDEEP

    6144:AO6oVJ59N2c3FEyohRbTnIkwcDku8dQDKfcQqUwSLjiXTkgQ:ASJ59r3F0bTnlwcDkuzMcfSLYTTQ

  Score

  10^/10

  xloaderutaudiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2