Extracted

• • Target

    Lista de ordenes de compra.exe

  • Size

    653KB

  • MD5

    a8732c40f2c0e569f938a59e0ccb8130

  • SHA1

    1b4683cec4d54b3217b10d3a4908537ce52a9808

  • SHA256

    9c558e9f026119bab2580c1e38533870d351b1e01e65341427194504e2cdf490

  • SHA512

    e3241131f6f101c1113cf3802a1619736a4fc135c7bb69d3b97605e57bb5554b1b06fba060662cb46d47a63d12a04d58ae44382f28733922b1e4523b25a2b5d0

  Score

  10^/10

  xloaderpvxzloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2