Extracted

• • Target
    f73ab7df3c255fc1634f623d0ab2c09b
  • Size 496KB
  • SHA256 6aecf2a84c05d52c3789b9b22ef5c046eed5dee698e2d94d61cda7219d32bb00
  • MD5 f73ab7df3c255fc1634f623d0ab2c09b
  • SHA1 9a695bc5f0d99c6906f48151a8ebb15643956f75
  • SHA512 d7a0eaee93f90e784a05479d03a82633f0e0626aded8d6e9d3c4a794c9824e196c3a5f2f0d43d7bb4e85bc3bbfa2f4e5dd10eec7bf8e0a0d10bcabb24c0b3c85
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadermj6uloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2