Extracted

• • Target

    fe93fd7b777639146c4927a698ab4c33_JaffaCakes118

  • Size

    935KB

  • MD5

    fe93fd7b777639146c4927a698ab4c33

  • SHA1

    43d8501440f8df5e5429090f9af6335c6b32c292

  • SHA256

    03122f0024975ef8688129a291f7a5398a8ef02cf65f452daf3bfb2edbb3ae80

  • SHA512

    e6ddc3e452e37f6b69d7066ff8f1b3e4e6eb93f53e64398ef01993fa2d412497189af8f9e085e7c3f58ddc894589bb507ab7909474ebb19447b3d59c6cc02743

  • SSDEEP

    12288:gqaDADB/q7EhGteOdlClsYKWa52SyhvvzhJrOIpPjYeiMSs3p+:gvQ/vQenTW5YvLTCIpHiiE

  Score

  10^/10

  xloaderdi4ploaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2