Extracted

• • Target
    Updated SOA 210920.PDF.exe
  • Size 505KB
  • SHA256 81d263a31fc8b6fe2e2db250efd4314912eb09a11027a6cfc67257d7fa5e071a
  • MD5 66474aafcf1b5dae6da44f0965ee5e29
  • SHA1 d6bbe45bccd177c75648ddf45db11f0e6ee808e5
  • SHA512 11d6082595a50c7dc2ada61255e4022dfb326e00021c8ed1c7b55330b8d373e11493f69209db2be00d06ab4ada76ae875697fc468361e437e1ec474ea71e3eda
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderny9yloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2