PAYMENT COPY.exe

Classification: Malicious

PAYMENT COPY.exe is a malicious file sample. Linked to Xloader malware. Reported by 1 threat source, last seen 2022-03-22.

Detection summary

  • 0 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: XLOADER (S1207)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Formbook MalwareBazaar Abuse.ch 2022-03-22 18:30:30 2022-03-22 18:30:30 malicious-activity S1207 XLoader

Sample information

Filenames
PAYMENT COPY.exe
File type
application/x-dosexec
MD5
cf411c7832090da7dea8284f65c7e616
SHA-1
c54860d5cd9b861f0971c9fe304d074fcdfa8446
SHA-256
b6f17a86e93f3c7794b4d735b18057bc6f964a2cd97975114d106c75c06d4568
First indexed
2022-03-22 19:15:05
Last updated
2026-09-02 13:03:50