Extracted

• • Target
    PO KIPO000903 KIND122822.pdf.exe
  • Size 728KB
  • SHA256 940049a73f4604611186b3fe1f93bec8328d4ca2c486499d5be25df5b5d51ca9
  • MD5 6b107659d7e4b9fc7a1fa1c37b2c26ef
  • SHA1 3b25f7c71d738f809c7075cfd72da8de990b4f49
  • SHA512 7c32480de4a29efbc9e5b814e21eb43a47713a299cff1a9d6f4319e9579c3805b823220fb266f299b05bc8c9ea8d25bf688099a60929039d13da6829e8c9a1d6
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2