Extracted

• • Target
    Diagram and Specifications.exe
  • Size 397KB
  • SHA256 4e9cb6e83b7ea6e353bafe82262c6b1c1de8a5fb5517fa8bd8bd80b353ca472d
  • MD5 7ddf9139b29b7b35647dfa9e585023de
  • SHA1 ff9455ae69b531bf1864ece4ab90dd8186f1ae28
  • SHA512 a4e66072f3bbb32e6f5594065eba358a05113c7e56b3e149c68dfd4905661489385af03e9a1d89d9c087a856a88c5ee699fc3c6f9a212962856988c89a81aad2
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadersw39loaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2