Extracted

• • Target

    BANK SLIP.exe

  • Size

    574KB

  • MD5

    e31713764cfbbbe5c54f25a5cdeff52c

  • SHA1

    5af188609cc8e2eac3795480ec9d1edd21489450

  • SHA256

    a4cb158cc6b760f0e208da10143b34039f21e496d85d87303e7bf66045edbdd9

  • SHA512

    268cb7bc06d4ef647af1dfb7db6bfb8c2ca50ef75f63455f3f0ca8a55dc7d1c8c1b7d175d54ecbbc5f2baab22519b98688f64824924ca3c14c815735ce9338fa

  Score

  10^/10

  xloaderzqzwloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2