Extracted

• • Target

    nueva lista de pedidos n.º 002622.exe

  • Size

    134KB

  • MD5

    9de0585b387bb800a3c7758a07d0b713

  • SHA1

    8f21c5cd550d80490963519a5021a57ad811c26e

  • SHA256

    e20b3c660b0883091a7f144bcd97e45d74ba36a52d316d5be36b6d9c390dc490

  • SHA512

    04702df8c0af6389ac2974fc2959ff6681de04dfb5eb7d8e24e965ab0a057218b73b18c382235f0b66338ef21daeccf5586d4f724d14681258300c1cb1aec94f

  Score

  10^/10

  xloaderiepwloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2