Extracted

• • Target

    6eede7c5b08dcd2860119d4f456be572_JaffaCakes118

  • Size

    1.9MB

  • MD5

    6eede7c5b08dcd2860119d4f456be572

  • SHA1

    9d47c2ac288d9cee2b79dec75fc4f6b6b0ab0fb2

  • SHA256

    5a88f2832e625232b811db9715dcbb1058f9b33ae86677a95c3482ba66f2b98f

  • SHA512

    49a5a2c1e1ab9a26cdcf93711cc2c54a34f686feeec6bbb57a71cefb31d3f914d31afa0e1fe6edbfdf6220635e33245d36e29a8f14f691f03f66fef3c7df598a

  • SSDEEP

    24576:ZNmnNPidL6R8S4RMkLWRzFGscXzmExOEY4UJKW1mTLFeCXDMDYxN7:eNtzGsmY4UJKW1mTLFeCXDMDYxN

  Score

  10^/10

  xloaderbw82discoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2