Extracted

• • Target
    dhl Shipment of Original Documents.exe
  • Size 553KB
  • SHA256 48642cfdf59906d5b22ec805f79b953e37a44d4dad2bef8b55e5155dfe92ad55
  • MD5 a82c07f002aa3512a000eecebf425af6
  • SHA1 f21fed9c74a59cb2ca81a9ac0d32253c0e80b77b
  • SHA512 fdde17438c1c68361acc91f89bf77d8ab1d74ad55a9eb4fab62499aacb0085b8fdf137463c0ee70d6b3735632351589923261ffdccb8ac3a8997979887aebc66
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadern8bsloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Blocklisted process makes network request

  • Suspicious use of SetThreadContext

  behavioral1behavioral2