Extracted

• • Target
    tmp
  • Size 561KB
  • SHA256 38134fe55100f4b90d1522f444547f670c8e197754d84ec0c83fe22bc352c22e
  • MD5 ca6d72983949be70d6aa4517a6b68860
  • SHA1 8758f924b08fae4c5d7025724f96034bb188b4bf
  • SHA512 8d5e7957e5c55c6debf612ed0d04681a681f21d5a5cd77d3fc314ff790e5c2e8aaae24d16524e89014b0ef97c6464b84018c3e88bb6bd541511728b691729f1d
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadernq06loaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2