Extracted

• • Target
    DHL DOCUMENTS.exe
  • Size 365KB
  • SHA256 f925fa78f9d875962f79dacc19be176ef2ae5bfdc9e912ef9f826a20feac7df9
  • MD5 f7d03b948a9a02893d2a6a46be303aeb
  • SHA1 2e1ced0b95456a262cd6aac2d2d56cffeffcf8fd
  • SHA512 b15f27c17c0e6a49da71b2e0e41a948627fce60e3a339f57097be0614764d689d020960d9e0d231e1bf77173c10c9da23d7c4fe75d654ce8490ffd79daf85da9
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2