Extracted

• • Target
    Order# 210145.exe
  • Size 995KB
  • SHA256 5ffbe2b24599383732373e34a80cd2cf864d806595d80dfc1e1ae3af83065780
  • MD5 36c8331e327d1f77fc9e1f23b038e656
  • SHA1 98d95c77d51e85a539428dcb985cad0ed9b1ef6e
  • SHA512 3a2523e1017d66a797093e1a116261ed62753f555b75a69057265d9aa64b6531305289b9d4203112c3dd4a16c39c8983ad488a9c6fe07fac24733480656ce77e
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderimm8loaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2