Extracted

• • Target
    aUzTNhGt8rxnyMr.exe
  • Size 732KB
  • SHA256 e649ef1ecf0e0daefe140fa78271435271c8d55607f8365ddef4d94b66bfdfdd
  • MD5 2ab9f235b6f9809e71ca512337ebaa40
  • SHA1 8a161462526f16230b11b562b70b1bf142bebb74
  • SHA512 135e1cb6d15331fffbe8a8da6379f6c2b425d79988edc90a43368a63b9d3394cf685e21074965a53377373dc8283ed9e6faabd6fc6fb58888321782b93dae655
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadericunloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2