Extracted

• • Target
    005432567455.exe
  • Size 507KB
  • SHA256 7b7a79d27d21d89be6a1faae7b389f924b5a8a5e016924c3ec6f792c9b65defa
  • MD5 90ffd183ced2aa2e798a9c7d4f7f5720
  • SHA1 1ae2d32885a7bf145f1caa0fbaca25899281804f
  • SHA512 8beb34c23de5de88a28de7695b5e4f8829fb6972bea36fe98f44a130980266b4a2e4dbce18b60e74957511d102aa3d370f0777727a2ff335d5b401d27d9c4b18
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderp9iuloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2