Extracted

• • Target
    SPARE PARTS Provision_pdf.exe
  • Size 790KB
  • SHA256 820874caef7dd09b3475fbeac4b6b7372446b6b5eee1583aa7eef9610e27b9f8
  • MD5 837eed0b0276914b55283362eb557c70
  • SHA1 c0810062703156f195c52ca3b516813cb3ccaee7
  • SHA512 fd0623d2ebfc9dccf63e56a68099522fef750b6ef7db368d88c1ecf1232d33a3910eaf6752db3bf2bb4a7f9590900f5b8858e5542295038d5687e28f9ddf8da4
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2