Extracted

• • Target
    copia_rapida.pdf.exe
  • Size 950KB
  • SHA256 39d7f0b102aca1db8c71a3a7af79ece2aa2100dbaf1c20237d75e36271833ef2
  • MD5 c51efc503f561d465386699c92e1db7c
  • SHA1 07c8af14acd55fa65c80537bc7be9041ddd7b808
  • SHA512 4d40211e6ba7c488996d5e9570dcfad0bb16f19b42b0e77209a6db77bf8e61ee7ae3e230381cf567848384483366a31b67412e05c2b1aa91f72422b73b7ae52d
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderuevbloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2