Extracted

• • Target
    TELEX RELEASE REVISED BL DRAFT.exe
  • Size 399KB
  • SHA256 c3096cfa6809f117e6d9d1011c57a91ab81055d92ff3348c51c47ceed7e330bc
  • MD5 ea933aa3352fc43147ece400442cdcbd
  • SHA1 2aed0cbbd1aa52c5b9058606b8fd6fa4bfa4363d
  • SHA512 0ea6790fc9a269d7c874d8522576c9cc1c95addcb06cd5a9569dea3b5789863a1962cccc63c4f1049fd15c880b7fecd292485817f4ee2c067922477230d3c1a3
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadern8bsloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2