Extracted

• • Target
    DHL_119045_Receipt document,pdf.exe
  • Size 208KB
  • SHA256 10e6605721daba9c3af23c993301b502d8f940df75bfdc21bc5d90e134ecd7ea
  • MD5 4a635423e09311f70895715ffeb33c16
  • SHA1 033c5f1fd341fae995ee7f744785aeb90494ef1a
  • SHA512 b1e81f84b7a541ec0180f6dfdaba10cb2d4edfae75a88588a9ac842b2f855b374ef7d6d4d6bbb8811ac3ccb891603ce504d4a69f82b1502da509052c14b2dca9
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2