Extracted

• • Target
    W5pKGscUg2oapcr.exe
  • Size 930KB
  • SHA256 625c5bcad021d0e8c8f0478d2bec573db81fbf5957e5f9323a481b7d1756f66e
  • MD5 634eec6fd6fc71b365e6c51979e12f43
  • SHA1 74ad2933008f22fdea3424694867ba39403470b7
  • SHA512 01786ed8643f6185cb63fd29bba946337161bb3db906d2d20053edea8eb0fe618a342ed31ae2035f90378f01db1123b948accdc7b0483784a9b3662fd0bc0e10
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderrmpcloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2