Extracted

• • Target
    Pump Parts & Stainless Steel.exe
  • Size 540KB
  • SHA256 9e94ea964630e088c92a9caf37bbf4e9716e9490142e58f3ba84042b02461021
  • MD5 e0213cf3bd4ca9cfd094272ed98c37a6
  • SHA1 704402640a854c50d4a787155d4eba19829106c9
  • SHA512 e52494a23e98c19c23c18c025de804426464101d436b6ba66b096112bc8c06ff86baed2d3164688f15299edf2c4a5351b12475e70f7cde851d7b9006e8913e86
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderm3ciloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2