Extracted

• • Target
    Payment Copy.exe
  • Size 749KB
  • SHA256 3a3e12eabec6d3f196912bfeca3527aa7f965721489217d25b663af4a88cd25f
  • MD5 219f68a5479c09286580a583cac95c30
  • SHA1 5aa4afa9a64567421ec5ee446b91afb555ad088c
  • SHA512 e1110d22917448c92b22ec521bdd9b9c06b3c107ea426c8c4b3024a7f146e617b7f220d36ace0c7bd665ef3a6f2c86581eff09e069112e31c79bda9a7dfbd030
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderu6fnloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2