Extracted

• • Target
    USD122986.exe
  • Size 502KB
  • SHA256 75f51a01e4c2c9662dfbb21c0094b8cbef4823f6919c816c04efef2e25678d76
  • MD5 ac773d66016d46a98d399e32edf12c45
  • SHA1 4a706a2b1fe1c561db067ebdfeeaa158f638f967
  • SHA512 7e0f89230753f075c604aefee2b0727e039b2b9cee813fdd8813995bfda213e0766bd664f48a7a61d146cf485864911364cf6b20140b3d0de39e65a5d3c3b7b2
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2