Extracted

• • Target
    TELEX BI FOR SHIPMENT.exe
  • Size 1.2MB
  • SHA256 570739eb4eabb01d3d7c22c895a5a86153ceef2b54d32a651a12869b33b78015
  • MD5 c37b42d5f74fb1e7e1252f9243734539
  • SHA1 329618a40af23cdaff5aff3178b90bd43faaeed4
  • SHA512 3a47b4846bcb06d06499d1137c5a7983b1b5512d4902949bfe94efadc245e4baa5733bc509137bc919b5cd3bd5c1e6a674bf8e4de57477b76b22ea6fe1490a43
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderposgloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2