Extracted

• • Target
    DHL Shipment Notification 7465649870.pdf.exe
  • Size 227KB
  • SHA256 dc5f7d89ab2465597ff7fa9f544326613aeaab2afa6e2e457ba5fc0da15bd450
  • MD5 f206abfc024129f1af253e5417f139d7
  • SHA1 2c7e574dcc970a2c4652257958873ffcd4c3aa1c
  • SHA512 121bb9f8a27bf8a0d15066836ba6dd0a5e37ef588b594d649b91fb9fd0793fadf4f836f0c7ede476912dde6f8b6de9b7ca1c4e39050cdec93bf2d59c33333354
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2