Extracted

• • Target
    eda2f736aa2185aab69b94d776d884aa.exe
  • Size 815KB
  • SHA256 93f0775c5a5512759f85db7b3d1c4b3ee7049369cd0dcd1d4f778626621bfa0c
  • MD5 eda2f736aa2185aab69b94d776d884aa
  • SHA1 23bcda1179408bc7a4683ee707cb238f27f7d295
  • SHA512 47105a31fde1ad74c0ee75ff2089f217aa9a8d4620bebcff20a0a14f6d1a586cc3cb226255d1d754ad7d0e99615d4e524343cfa0d433488feff9a3afce37a914
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderb6culoaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2