Extracted

• • Target
    Payment_Advice.exe
  • Size 1.3MB
  • SHA256 12d89c6e8e3ef2ec6ae4fda7dce291a2418a51daa9eba44a583ced847c9e4e42
  • MD5 0c90a502cf1d5e66b289b82a22fc1693
  • SHA1 b7309e98f9d8b58442a77e1619e4524efd7f6a35
  • SHA512 fdb013cb09ca14093e5a2f177f91ed1349d47f4c17f7f610818fcf583c00ac518ed55eb655ed460b157024c150b23cdc8406d3795253a5ec7096adc339a2b6b3
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • CustAttr .NET packer

    Detects CustAttr .NET packer in memory.

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2