Extracted

• • Target
    PO_9756-NMNBVC.exe
  • Size 871KB
  • SHA256 04657288f9e931379d2c526330b23310c8bb26d65a209a2ebca5fb089b91efe3
  • MD5 9a649c1d193d55ef7f66e59b8294f24d
  • SHA1 e4c00ec807de5111c061ebc5d8421fe0d0114fc8
  • SHA512 37fec35bf1cdae3560dc6e1503320f628d70f7a701135253412340afb84101f4ed444cb243143febbae6983969c1fe0e7e7a528fcd1aadcb7a8f08150130d4b5
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2