Extracted

• • Target

    f9bded6d9401144a3485ddd295dc2b7e_JaffaCakes118

  • Size

    763KB

  • MD5

    f9bded6d9401144a3485ddd295dc2b7e

  • SHA1

    98e4b809cd6fba4205a92679825966bba7e868f1

  • SHA256

    de0204a1139358642d9fb0ceb2a62b58fe7f89cf254509f83c636b9ee2aa25ce

  • SHA512

    3347248054bf8eb3ba194f3485fb0518ed7c220a7adcca59767f546321503e2769c461e4fda26f5027f117c95ec31c31d6b6e15dd7a2e3e4b184b5897440a6ac

  • SSDEEP

    12288:Jbk3u/m4SZ/r4wLhgw3HqtkYjstnVGD42WzwssJIWAyb2VviWsg1KL3s0Oz:59/mDZ/rkyCo8D41zDeiVv1KLcD

  Score

  10^/10

  xloaderqcirloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2