Extracted

• • Target

    b7b54eeb2ed2b6d9d1d5c3d97646c48073234f37c798a528e41072f74e95e6b1

  • Size

    451KB

  • MD5

    bc743934aea2d49d211e3d6eb182f56e

  • SHA1

    c3cc825ee22f0850abe6e503c5d6838ad7b44d1e

  • SHA256

    b7b54eeb2ed2b6d9d1d5c3d97646c48073234f37c798a528e41072f74e95e6b1

  • SHA512

    cc9c7069965230d31f0a10171bf4d4e8dfda33990c699ee1541d5f27083994ca1b5d927462383821914330db0438d54f024f492278ee54e0cb30e6df3ad2855a

  Score

  10^/10

  xloaderigquloaderratsuricatametastealerstealer

  • Meta Stealer Stealer

    Meta Stealer steals passwords stored in browsers, written in C++.

    stealermetastealer

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2