Overview

overview

10

Static

static

SecuriteIn...32.exe

windows7-x64

10

SecuriteIn...32.exe

windows10-2004-x64

10

Resubmissions

22/08/2022, 18:13

220822-wtql9secf610

22/08/2022, 17:56

220822-wh1m4abcdl10

Sharing

Copy URL Twitter E-mail

General

  • Target
    SecuriteInfo.com.W32.AIDetectNet.01.19232.14203
  • Size 861KB
  • Sample220822-wh1m4abcdl
  • SHA256 58ffed8f3b25296ea15a8f5fe71625db5c1ebad7776b4aa5df441cd0246213e2
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
xloaderloaderrat

Malware Config

Targets

    • Target
      SecuriteInfo.com.W32.AIDetectNet.01.19232.14203
    • Size 861KB
    • SHA256 58ffed8f3b25296ea15a8f5fe71625db5c1ebad7776b4aa5df441cd0246213e2
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    xloaderloaderrat

    • Xloader

      Xloader is a rebranded version of Formbook malware.

      loaderxloader

    • Xloader payload

      rat

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks