Extracted

• • Target
    ORIGINAL PROFORMA INVOICE COAU7220898130,PDF.exe
  • Size 455KB
  • SHA256 9b985974efb3d7555b61cec77f2667cd6aca5f74a07f712b3aa58a54aa03bebb
  • MD5 8e6c4dd7ce47a6a456438eb5df06e52c
  • SHA1 838e6c7f24bef22088d140c851cd1a3c35c9f241
  • SHA512 89881068b4aa6476a45e4c5538678bad7a636f8c82e6831c044e7f4a0b3fc45e6a0f4717b328f09d2f0f23e7a60624031eb59aa65180d2cd8b30fd40012db440
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2