Extracted

• • Target

    ec2f93b390bf003cde1dc7dbb74a4ff2_JaffaCakes118

  • Size

    380KB

  • MD5

    ec2f93b390bf003cde1dc7dbb74a4ff2

  • SHA1

    a7b0bf6d61332901a3eb6c8f175c1e2f71cb3689

  • SHA256

    b6a58224bb0fbca5d4a297bdc2237ffd671e5548ebd6d35434ae1196df97f8d9

  • SHA512

    b7ee3516efa1938d398909a4949c5e129eb8fe206501516c96ef7309998707f9af6eafa975be18e900b9be4c67d8db1d7e76147fb352b97d477d824fad67c227

  • SSDEEP

    6144:ZUGnO5j4HaA0vFBur4xeRt/+TKSyMNF5889eZwlqiaTXAbn9Erl6Vkp80sxH30Oa:qdqaA0vFBur4TByMNr/9nzaTXyn9EwVg

  Score

  10^/10

  xloaderqb4aloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2