Extracted

• • Target
    KDUSC-PRO-MAINT-117-2021.exe
  • Size 779KB
  • SHA256 ec967cb2eeeb76c7acaba88e1c3eb6f5fa39cedb54b4edbb17eb0087977d21ee
  • MD5 33b907210bb4d49062f0e2747ea08c6d
  • SHA1 db94c37b6bbe1177db007317c0dd8ddc4c84e68b
  • SHA512 18f0884e91c3b7d0feb024275bd5ab9bbe78cd1eb6eab333cbf4e603d45075d37b26b5256b6c5a65187299fce74c9a35c7a9f9655937569f589d731ce7a11998
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderu0n0loaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2