Extracted

• • Target
    L4.exe
  • Size 774KB
  • SHA256 9e6337dac3988159b730ab99e0dfe6f8afcb2cfeea67dd8f98df32b836675bed
  • MD5 82b664c96941c31cdd0180cf35adfe38
  • SHA1 3d74d1919939dde5b3eb19588ec727fb26546ed7
  • SHA512 4485a9dce50966ecfb8d24e320315ebda8a07a5ec5c4e728c4def48cbfca42223e9633745ec92ed751e8ea8c2c868a0d2fbd62bd915170139698a4221584937f
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderzrmtloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2