Extracted

• • Target
    LAYLA HASAN SARHAN CV.exe
  • Size 699KB
  • SHA256 6bd5fda97afe76f3d6cc66ffac1350e77256315e151364355af9ee6d56be8ebf
  • MD5 f81295f356d264cce71556e904952ef1
  • SHA1 940af01cf649933f96437e2cadbc690ffb5d87ef
  • SHA512 4bc6194da7ee79ecb654cee0ae9401d6f736ef223f61bf1cd3b2f1c7f3effeef782c6e6b85a8f3f7fc3ef637a12febe27990e6d67a15e2f4d60ebae21e8dd08a
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadera6hsloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2