Extracted

• • Target
    f91a66d080744b9e8b946984d6d747c4_JaffaCakes118
  • Size 960KB
  • SHA256 c6a1a1a68b5faac43930deeab9cd6745bde62869786e21e0681b3dc0973afa80
  • MD5 f91a66d080744b9e8b946984d6d747c4
  • SHA1 886580b7e7d7f27135d2c9981770a2a59332e680
  • SHA512 b559c9048de556c45f77e26d4c2f1c7785348b76ae4d5f9957e202a5c9d01e7c68a1a3958aeede45ff427ad741b01fcd15497e67898acfc5176f9ac9aa1e2238
  • SSDEEP 12288:p1baMm92lXt74Hu+sYq46e++BJETV7MSDPlGRZz/mnk4zQIL7cQGB3gVIZlH3pmB:pBLN4rpaJye9mjs2M
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  xloaderzgratm6b5loaderrat

  • Detect ZGRat V1

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • ZGRat

    ZGRat is remote access trojan written in C#.

    ratzgrat

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2