Extracted

• • Target

    3e730659320a4ed6b437558f585313ce_JaffaCakes118

  • Size

    813KB

  • MD5

    3e730659320a4ed6b437558f585313ce

  • SHA1

    d4daac30adcf04725cdb8477ec26241f8150c1ef

  • SHA256

    b241d39387ebd04a46935432e7abb733d850aa1bbbd4ca686539821f41772e05

  • SHA512

    b8e8438c18d6c4b3e7b7f1ce057d4d31c86e72fc9205f687e1eebea9dd06f43f3890d0bf1be4fac1f7d6669a123a875c9dbae3304dea36cb91d71ec8326fa02d

  • SSDEEP

    12288:pBGiY6H3FuFp8K3hdHHMUT5FZ6huvYBoU//0dmVmtiK5oxEy:pA6XFur8edHHhT5YuvYBoi0dE+Foxx

  Score

  10^/10

  xloaderh5jcloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2