Extracted

• • Target
    Quotation.exe
  • Size 212KB
  • SHA256 6448c5144ca088ea86cb927c163a409a0a235e1c91cfcc3ab8f6ac687f0c8e80
  • MD5 8c7ace5bd189d76207cdcbee5edff5dc
  • SHA1 a01ee318caa4fad8e52d12dc9f005bef50b471a1
  • SHA512 cc6a2602d8628d177afc19bf6f2022752513925b1f384981951c68c9d56831fe3cab67c3644980c72076ec3ebb106e18a2936fd6cf579c7cfc2e09fc40174f1f
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2