Extracted

• • Target
    New Order Specifications.exe
  • Size 757KB
  • SHA256 91a28bbaaaed3acd39f0c37cf091e0a4e3a54ac5f00b4c26c5d3af44c9bc3fb3
  • MD5 6e86679cd441524ed4bbce078bcb0a7b
  • SHA1 5335349b936c536502b805a796f6f0033588cd1a
  • SHA512 753b815e78bc793db74574e237eb002740228cf53fa655827b0415c029fd1980eb61239a9a27655c00f7ad27965c01fd2c318fd3c5a1cd406fcda84f83911abf
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadersseeloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2