Extracted

• • Target
    REMMITANCE COPY.exe
  • Size 929KB
  • SHA256 55dc099e790b76a62f56ef105ca53205ea69d9f4027a93554b03d573f112d643
  • MD5 059d92b876948ff3102b8c78e26621d0
  • SHA1 e6bece6beffcd17c46750905bf89687de514af0e
  • SHA512 07fca22a8a65ad3108f6406d1a80b7f1b6467939fee349b80cd2bdde97c77475dcd826715687896f7b1e7310c597919ef8bc5a9ceb550cab57c78e9b0b544314
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderkmb0loaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2