Extracted

• • Target
    LEMOH.exe
  • Size 213KB
  • SHA256 9ce9e41c146be2b9aecbed6e14d9c4fa9d69d6b51038ba27782d08a432c8c95d
  • MD5 d4565fe03a6408d2f7b6dff450b81e04
  • SHA1 a17bfbacf44eca227ca6d7350e7a964ca121e9fc
  • SHA512 966fa4382a2cad471289da96655be467406f3c47109f146324d091528c6114d978f435cbb095da6bec4737b4d7267c0df6a7989f2719d651c2e794b17ea02f57
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2