Extracted

• • Target
    Payment Order.exe
  • Size 426KB
  • SHA256 236e7cb220d65dd5fe8a2f9aa0274331cc0e0f7e724839a76423dbb1a0cde625
  • MD5 150b119c21d361fa3d3beb21b620a0f8
  • SHA1 d929adde0d88b155013d187c579e3dbd2001e8bd
  • SHA512 307b4127916e6066666a41e6f8823686726681192f9f540cd9f83a9854c6f2ecc5412158d95321ee9cc48f0e0bc08b89035c37237509f488935a9d6692a1ba53
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadernurcloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2