Extracted

• • Target

    DHL Express Shipment_pdf__________________________________.exe

  • Size

    1.1MB

  • MD5

    e0e2f85a7c7542a6aa086a34be3ca86e

  • SHA1

    f29e3ee8f219c79dd89f5884fc342356f0c47daf

  • SHA256

    648a44e30f42dfbb760c84869255b1246b5940450e2fea476b1a138634e1785d

  • SHA512

    a12cf1af7246f499ea3e48418028de8a635721d56169ea586c113e75fbbb7614568a8e7c3e9d7993cb429d5ade24f99fcea1802377892670fb842e85900af1db

  • SSDEEP

    12288:YY4aNzsdDXHFYJDc9F3nC0Py3gAhRIIalhBMvAcmTaciU9dYdIR5PsYoYi0fpaNl:YoxKzHFYSblhBOmi3d45k1l0m2hw

  Score

  10^/10

  xloaderajs8loaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2