Extracted

• • Target

    629b3cbb423e7b5b51f23a87b99a92e6_JaffaCakes118

  • Size

    435KB

  • MD5

    629b3cbb423e7b5b51f23a87b99a92e6

  • SHA1

    014c1d1873fbb5f18581b1da3414417bc55a5cc9

  • SHA256

    b63ecc7941b1c62dc98d59344ec81a623276033f889fa43628010fc54030e100

  • SHA512

    4892da02d3262c7a4d781917474fee3cb5b22ed494b670c43cd53429eef0e7a8e7603efb68bd427be34d83037ff7900d79278a0195c5a1c8d3ee68253ad6ad00

  • SSDEEP

    6144:Sr5w4udmLIY3llsUfFUlakZZlXV5VNIFdjSLjD9bHkXauTHmS0e901zp:mWSzbsckakZR5zqduLjpbE/K3d1p

  Score

  10^/10

  xloaderh3qoloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2