Extracted

• • Target
    YKqDUg3NxSA9bwZ.exe
  • Size 523KB
  • SHA256 f7e1c8a641a9998b7a0ece478f086de00f15bcff13473ec26798b14659219bef
  • MD5 c960ea5438094db2b53e2ba207d40f2b
  • SHA1 f5dd4616c027ce9485072fd27a3406e4aa955a88
  • SHA512 a9cc4cbe75ae17fd627a4babef969b6da8738f9b0d6be4e3de54fa883062273db2072dcc11ab728595e940d81642e621aae1969456970e1a4187c2cf96fe34b6
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2