Extracted

• • Target

    tmp

  • Size

    659KB

  • MD5

    680597e569b66c1c77f1f3ef9d145080

  • SHA1

    c21684c64fe6ff4ea94691a035b47cfec7dcfb05

  • SHA256

    8ecc7ecdce9763d43b61041cbc6c2151fc8583a01af584f7f5fe0999d127aaf6

  • SHA512

    c9d2613706df5b2ed82f5650a1812565441e1d09f733cfbf11f14e6e53d92d12a7a827b272de6605c0230165c7526aea925ef53cdd148fbf6fa8bee86714c540

  Score

  10^/10

  xloaderocgrloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2