Extracted

• • Target
    see7.exe
  • Size 574KB
  • SHA256 513624286483a4e172511b412b82445a06eefc904d54de75da656ec1a6f8ae99
  • MD5 1ccf28645e2d52556487a9710de54d8e
  • SHA1 e83b5b14a3d08d8838e23c08070ebec713f859ef
  • SHA512 5a5f4c5fb992bac2119234563a8a7d3418baab3e3519f936f13a598aa9026dbeba571b7981a5a6afa519e18b124d8cf4c6642b30b88a4a091a051e2b41c5f321
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadereidoloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2