Extracted

• • Target
    LSP140322.exe
  • Size 924KB
  • SHA256 90b9df6a803fce475920ccd036a647601a8f65bec5a7a9bbdd59a86b4bf004bf
  • MD5 88d41675e7350635b69789e3fde00033
  • SHA1 7052d7dbe1a57c23be25673a1ac6a89facd6fa28
  • SHA512 38639cb9a955bc6ab88c77e44391b23b082157100cee9646a10cb09722adc9c6c485bae4617121395ccedde0b6725737cc0171fee7afbbae80f4bc1863f02f21
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderahc8loaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2