Extracted

• • Target
    shippingdoc_pdf.exe
  • Size 207KB
  • SHA256 d853a2c5b2ea683d568bc9065aa37ed906e46eacaef2412173cdb7a04214db2a
  • MD5 873b64d64132e8317ff9340226061405
  • SHA1 536c1468c92b3d2cb17a01ed55e1787c69f7f884
  • SHA512 c7a5aa1e212bc3bc8c3ce15b67d9c532b79d8e6e95b5f00e30d26188e13dd782eee326cae80c70819d3d2d4f418707546dd522676f80a5279985a0b5060b5090
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2