Extracted

• • Target
    5b9d23eb5a8f6d5578897abbecfe3d37
  • Size 719KB
  • SHA256 0bd840a10d4463fe31116ce57b0b674a6d10176d910cf7bcd9ba360cfcb9f3a6
  • MD5 5b9d23eb5a8f6d5578897abbecfe3d37
  • SHA1 9f18252fcdede3fc2b753b6192ccb242182c2e29
  • SHA512 3c0e899868d291a8b701778380a30aa36b25ed74d2558297c23e57a2a4a953f50ebe98cc4ef30ed40d68717b2af4fec286c3bda15c1e0c24ce94ddede74b2908
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderfoi3loaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2