Extracted

• • Target
    INVOICE_0002_PDF.exe
  • Size 694KB
  • SHA256 39fc8ada09fdee11dac8fbb0236624c2d5dcf2b66d8f2aa4bbcdeada6de6206b
  • MD5 f866a06214ff680e7d9f586a8d6a84f5
  • SHA1 e835c54d53c216a7e4b0743bffe37fb58bf66e72
  • SHA512 9e207618b176e3301518eba958fa0eac1e4d434744a883bd6481ef364a67a72dd78b657d63783b0ac1524c996511b4557d6af18236a9b0ba23ce1599543675c1
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2