Extracted

• • Target
    TNT 07833955.exe
  • Size 760KB
  • SHA256 1076b9efbc0e135c85f1228253f9a1d2f35f4fd49c70d290de72808f72bd56eb
  • MD5 198447f0025a9f30c55a4f16b1c02b7d
  • SHA1 8f7468eee07da55beb5c75174dfcce3f5108897a
  • SHA512 6d5dcf92872e19dfd6ab4fac501664b1da05d285d30d00c05a5faad546cf7385c26cf8475f0e96bcd63171bf63ca33039066cf03acdf6bf6e0d65c013dbdccbc
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderb5celoaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2