Extracted

• • Target
    COMPANY PROFILE.exe
  • Size 520KB
  • SHA256 12412b8e760d4eb40a652e2f1c97aa3fa90d9d913dac4a94bfb373b5b9fc9074
  • MD5 31de5a065167f2cfe0c4dbea8b2bd6de
  • SHA1 26432e905e766896530e65581aa13e61dcda3ba7
  • SHA512 bb21d19cc8a6060a34062538f48901eddd835f2620a5187bf60c193c1447a5d4e95c2fc9c80f05f3bd3d398cb238ecf3f775facf40ab3c801b46f996260815f6
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderi6roloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2