Overview

overview

10

Static

static

SecuriteIn...17.exe

windows7_x64

10

SecuriteIn...17.exe

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    SecuriteInfo.com.W32.AIDetectNet.01.17217.15039
  • Size 701KB
  • Sample220713-s5bqpsbbh2
  • SHA256 684782ca20359680b64b720ee81fbb5653fa3a13661c06c61c4a80af50fcdcb9
  • MD5 SHA1 SHA512
Score
10/10
xloaderloaderrat

Malware Config

Targets

    • Target
      SecuriteInfo.com.W32.AIDetectNet.01.17217.15039
    • Size 701KB
    • SHA256 684782ca20359680b64b720ee81fbb5653fa3a13661c06c61c4a80af50fcdcb9
    • MD5 SHA1 SHA512
    Score
    10/10
    xloaderloaderrat

    • Xloader

      Xloader is a rebranded version of Formbook malware.

      loaderxloader

    • Xloader payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks