Extracted

• • Target
    IMG_9785.exe
  • Size 393KB
  • SHA256 31fcaa22e49398fe59bfdbd11e8b341c700c8dab0165b67caf3982f7e7164643
  • MD5 b0b77a417db9e331e0f1c6cfb5a7aef6
  • SHA1 a1456ef94da9a65199d601a94244f75283a5a604
  • SHA512 c2d660d3ccd92a278426737378fde0c05f0e3a4ad41a42351f33bc019475572145373a0582840b6c6d438f2fa0219033307f36d597cef3ff7bc19d5f55f20248
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadereqhvloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2