Extracted

• • Target
    CONDICIONES ESPECIALES DE DHL PARCEL ACTUALIZADAS,pdf.exe
  • Size 131KB
  • SHA256 fae733152e6edb47a0d4ee6e829cf8a349885b7a9223b4ef11de90825f9f05c8
  • MD5 1300a5da4544ce9a971aa47ae57a1127
  • SHA1 7cc6f77066f55c67eb1bc93d7aa66c829818c1b5
  • SHA512 a5dd1c9c8893192c6950bfca79ebc64e855a05e78730641dca5b7911a13c75eb74591ecabf32993fe0c4be24c97f736c4f05b98a6d735bd111a379869c97603f
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderc0a7loaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2