Extracted

• • Target
    dAkPKAwtoDLxTrD.exe
  • Size 836KB
  • SHA256 d0fd68de07eaddfd233b49bad8c222121ee284d8f783900d22e074accbcf7c2e
  • MD5 70546f38493221036fa4704f272ca6da
  • SHA1 33994e6316abe2f24c448d916fb53c5468d0f76e
  • SHA512 a1cd4799dcd8e7b9cc56df71388faf0749e69a832e0b2ceb16f1956659ac1d24d8f1906e34b9ee2f94f686a43e80556014bb9f01a5ba5160224a40e30e30efbe
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderb8euloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2