Extracted

• • Target
    SKGMC38758347_Aztrade azerbaycan urun teklifi.exe
  • Size 679KB
  • SHA256 8dec5ed95d3ca077bb1c2695074877a7160f97960df22a119d9f2debfb18dc0b
  • MD5 7b237f5378187373a67114d738cedc4c
  • SHA1 56341c81d80a8cb85c7b8ad0fe65a64572860ffe
  • SHA512 1065b5f7ccd2cff48cf80e62c7840cc81b3cd9f863cc3eabdc5ea47a6d1d69ce910273c589d5e355bb6519fb7a0c25ac15317a3f1053fe519ae1497c3b23db27
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2