Extracted

• • Target

    f02f2961032796a25c7e090bb4f70566_JaffaCakes118

  • Size

    252KB

  • MD5

    f02f2961032796a25c7e090bb4f70566

  • SHA1

    8c530a1533800db7d8dea165ea93421e2c996dad

  • SHA256

    7a34064785bd677a927fa90988d9001aed285762f230d0fe08db7b2ca89ce987

  • SHA512

    92df5ef56be6a6f5eeaeeb9b11559ca0a2960de9e7e0ba3a24308d603fa7be3375e41f7a618b6d02a4d7739b3ac75ba91203bf2ecfe963689539bc05dcdb0507

  • SSDEEP

    6144:Ld53TvpHeIl0l7o0YJvxPfqAg2bwejuDjwZbC9sU7ltYp9f7OANxB:Ld53TvpHeIl0l7ohBv0fAbCHTyqA

  Score

  10^/10

  xloaderdzqdloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2