Extracted

• • Target
    SWIFT MT103 28032022.exe
  • Size 1.1MB
  • SHA256 d6e96fd4a8960b01d5a03e2d0fc3c0e502e7e5d0b4648eb53aa6e7eae42d2c7a
  • MD5 ad5504d9dbb476d447e419e422d756e8
  • SHA1 17ac48763bffe4afb0b1275aac07a31f6d24eac4
  • SHA512 54a7a7d613436082c434f957cfbe68834410d6f8a0d23659249b2184d145d52e5773ac5cccc16d19cf71f6ff1e9ed3ce8e0d532e48d211a5a0d9fd66a1b65852
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloadern8bsloaderratsuricata

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2