Extracted

• • Target
    b1573666c4e30baa2fc068eeaafe3901
  • Size 659KB
  • SHA256 eb26b47f9aa3033edbc2d791075f85fcc7894cd7dc3bbaf31974024b9695a52f
  • MD5 b1573666c4e30baa2fc068eeaafe3901
  • SHA1 60fa41f07d88c6315bdb74cd15e35b85c2ab33d3
  • SHA512 b8647a994c270f92cbb7966e9259365c8bfbbafd953213bbcb2da4343fb06c40077708769bbd2b6b23d1b9a67fff4626bbbdd0e4006bf2649acf8b20d963c3c3
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderocgrloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2