Extracted

• • Target
    SGKCM20217566748_Federighi Turkiye Oferta Termék .exe
  • Size 921KB
  • SHA256 f515599d9ab7045656d0976c3aa5740feab68f862fa2e339379a1118f8ccba4a
  • MD5 89988ac505f3a7eedd5a842d23683f10
  • SHA1 087322adf2ee38e7b50bdc0b0a3c92d6657e5ab4
  • SHA512 03f97c8fe7240f0b89013ed8fe77cefad7ac61d70f9e07981986d96663b4dc90530485c204fe5d9e0e481bb49f4b7301fb3874f57aec17f66afe011b9adea514
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2