Extracted

• • Target
    DHL Delivery Documents.exe
  • Size 78KB
  • SHA256 b34bc888551b9a603edf76a356a4c0fc290fac420d3c6df0decd0916970bfb9b
  • MD5 94743aae8b0eb58bf9849035dc640b3c
  • SHA1 089f398df4eb9cf0511038cff177ecd3fbc9715c
  • SHA512 23b72e99ec9ad81a97d3b4902c020c7f27b3b156ca81bc5c818f9ecd88b40f6cfb3b9b436511e952de31a9c7841cf80e9019c0ad2a54d075ba5f1bf7e9e562b0
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderzqzwloaderratpersistence

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Sets service image path in registry

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2