Extracted

• • Target

    fa84498e7c2f782eb7e2fbc031f70859_JaffaCakes118

  • Size

    1.3MB

  • MD5

    fa84498e7c2f782eb7e2fbc031f70859

  • SHA1

    cbc9482a3e102f8f2f76b07424b7580c475e7900

  • SHA256

    85d66b1ddbd5ebdb7be3883335db72866c2c3a51f96a81655af51e6f139bb228

  • SHA512

    36e32b1df238c22840b8d1dc9351fe13ce538bd4efe3a2a31d6673404133457c2084e8bd9a3cda15f5b71c88e16261f3884036042d0975b8feabf21079413b62

  • SSDEEP

    24576:sQ1ftboSzyRuGj6N/i44rhXZNus89UrmMnfk/iQ2+S0dS:syt/MuhbcWsaU9fk/Pjg

  Score

  10^/10

  xloaderh388loaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2