Extracted

• • Target
    Telex release.exe
  • Size 1.1MB
  • SHA256 85434cc29d28674a4e118cdbbee621656d1aa0b0507fd1135446c93e97d175be
  • MD5 18ad51ffb2f94b9804fe509306faa429
  • SHA1 e2376d4790e7f9c18ad1b47a8c5abcd68e26a40a
  • SHA512 87877edec93a009b5aab4f20218bca234e22f717ebd003a64b6d4add0613a50e6e1b5d77cd4ca89ab2a90644f1110532642fe861dea5d14fde2442cbfff743ee
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadern8bsloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2