Extracted

• • Target
    EXPORT INVOICE 2021.exe
  • Size 821KB
  • SHA256 3bd841c6957e9fdb7e9d4558fb417dca9d7317d087cdbbb270155d9a6698e657
  • MD5 54bb8fbbfe0a665ca59579a0240ce2f0
  • SHA1 0b97e4463c76df4541179880902bb6966ef3f894
  • SHA512 fd6ac3075702fffd66df3566015bd6b2d844f28f0dfc0c638bd9198479514479514cf506bfdd56a671efa233873f9313a8b36d80e0bcb78a88624abd9f9b5770
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadermqi9loaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2