Extracted

• • Target

    ff404b207167fe0cdeb456afcdc2ee4f_JaffaCakes118

  • Size

    753KB

  • MD5

    ff404b207167fe0cdeb456afcdc2ee4f

  • SHA1

    b00ed24eb45f6c00d1ef005395e64c19096d2f49

  • SHA256

    c6a52e264384313d760b81ec595d9845c2086aefc514d093c9b160e4753ffb2b

  • SHA512

    dd8acc7352ff9455bc50b703a3e6126989caa4cbd030740d4de3e24895ac378f094dca2bdfda939715512bf6e683e84506ddf669f78ef801a0788764934e64f5

  • SSDEEP

    12288:ghRg9H1m42Z/qka6DjQOCejIb+JG/yFfZbVzlzB0tP8ndKJuf7T4Zp3h:URgV1mTZ/La6qejIbMG/Ofj5zSP8nddo

  Score

  10^/10

  xloaderwufnloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2