Extracted

• • Target
    DHL Delivery Documents.exe
  • Size 47KB
  • SHA256 7a4424af54555e5a81f6fa4e2b2c42c6d19c71bbcc261cd1be14af245c3b711c
  • MD5 5bc8492c9f262d1f9840635b87edf9c5
  • SHA1 da867a8b837e43c91414ff46d239ab95b799d04b
  • SHA512 a9f75f93607443861c6b2ec9f242faacda666967cb6cbdab8cb8c8f208047a7a90448046242aead694fe391a2bbcb9f52688bdbee08bf492cb511f71748a365e
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderzqzwloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2