Extracted

• • Target
    PO10120-21.exe
  • Size 789KB
  • SHA256 148ae566cc7845712fb357b42b86219e8ee2bb2d2308753f6fc69394deacbe55
  • MD5 ee4d68ed7e9665c43bad24f411f90f24
  • SHA1 0d551fd102aee89bbffa15b41f7b2a9c91e32d6c
  • SHA512 d6a6813ef6dc07cb112e842827cf125f6038e21928e8fc83ed4703b86844252628dc37f6765b6a9bc5257816f91d1b76de001ee60d54d99822a399acaf8b235c
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2