Extracted

• • Target

    Payment Slip.exe

  • Size

    831KB

  • MD5

    3d0d9c87ea732caf417afa0b8af62267

  • SHA1

    dfb1e57a9cf498310cb7287f4b5792cbcd8b3974

  • SHA256

    95b6ba2be30399f87d20e021bee29f0eb46773b67407f3ed9987d22610d5249d

  • SHA512

    e7db51cd7baf84cf65ebead15c3e56ca9e381866a4edc7e945affe4f64f53bef08519037a5e4fc2ef8f8034e91b240b5d3511a2cdec08e308e8e473a7430a83b

  Score

  10^/10

  xloaderqfffloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2