Extracted

• • Target
    Quotation #3200025006.exe
  • Size 632KB
  • SHA256 fba3315dff9db2942ea64b91b77cf06855e83b1eed9199cfed679b08f65f9f69
  • MD5 43d5555460c9a226a3f8d15bb4ac9d3b
  • SHA1 27e16870cb0c7d32326be1b275f260ae4df61fa2
  • SHA512 65633ad8594422a39c37ab1211c9a8d63982e31c0b5a9c47f74e3700034d4575be2f9fcce90c652f1b5811d2d1d2564fb9c0f0011274fc90ce359c65f74629c9
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadermwfcloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2