Extracted

• • Target
    Angebot RESALE DE Maschinen Interesse Nummer 000776244132145.exe
  • Size 966KB
  • SHA256 9ed12486b8f2201f6e6783b44fb9fda3ca0866f746abe3269b8b9bb1edab45b2
  • MD5 13204a58bf95ebaffad3a2f66d7e78bb
  • SHA1 f61d152fb3fbc81d3a1ee33f7646762e7cbe6c13
  • SHA512 3860eddf76219fa87092ad91b54834b63cec0278151a1494069fb74589180bdd34bc1183848a9544ef923a9c3d4ed9ed76ef121117bffd5777e32a224daa1fb1
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderg6k0loaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2