Extracted

• • Target
    SBGW#001232021.exe
  • Size 555KB
  • SHA256 f67b56c419eaa4e3df12d7624c0ef0047fb7ca691a888e02225c9ba6610e8f96
  • MD5 14340559c381f8f7fefaa8fcea601baa
  • SHA1 064f6654f82eabb5737b076adf076ef052f34a43
  • SHA512 fc16b42007d2ddb9d9686eceee3585109cd92c75caf2d253322a77c1cb8dc695a29603d8787f2f6d152ecc86cdbfd90f53fa2fe43bf14f7d4cdf3ba48e3e2ea2
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderetafloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2