Extracted

• • Target
    NEW ORDER - VOLVO HK HKPO2102-13561,pdf.exe
  • Size 387KB
  • SHA256 67bf85e54212cc6dd8e3f3bdfe292d7440ae7f7ad5f131f9c8b5ea51a86c1e96
  • MD5 a9b1aca1a6619fcc416ad9d7bc475d9b
  • SHA1 5228f4e1ff236c973003bf0d5ceaec0d0ad5d826
  • SHA512 9f9c28025bf0748f135f619e4f4462de12887d62e1a9be69e28fb4b1d9cb1d6852eeff364b4ec9e92cd43785ed4584280e9297540ad40f1a4b60ea8bccb30965
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2