Extracted

• • Target

    f336298269351704e8a3f7a5f071c82d_JaffaCakes118

  • Size

    1.2MB

  • MD5

    f336298269351704e8a3f7a5f071c82d

  • SHA1

    ee8ba4b276bfb69be97518c994d9536eebc76e53

  • SHA256

    837d5ed2867ffbf6b718264ecc27e620ffd9d14b1a4d2255f56b04181713830f

  • SHA512

    3c0bdfc2e2df3426300e1642124b10a818dea0f62691868f48b4f7b409587060f03ede4d050b0cc1ba2883ccbdb66eb310b55f42da21bd490493edf0be9728f8

  • SSDEEP

    24576:4lUWIHraPRdOG2nGhYrntpfV7WV/Nm/y12NhmK:4RILaPnpg0qnbPyYl

  Score

  10^/10

  xloaderk8b5loaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2