Extracted

• • Target
    QUOTATION LIST FOR NEW ORDER.exe
  • Size 1.3MB
  • SHA256 317613289fb0cce8c301f63922883b30d54bbcdf1cb01bfa772244e03a07dfda
  • MD5 2a28a3e032a65c25b90f193621b623af
  • SHA1 019659bb43b5535a9684d9938aa73e98682b0a61
  • SHA512 c6aa00f5777d5e0d2f687aaaae1ac8bb9b1689729688088fcde0707c060b8e96b46a133b47d586cb852b277f64b8ce9fd68578d9c25c7f6b702023534494646d
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • CustAttr .NET packer

    Detects CustAttr .NET packer in memory.

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2