Extracted

• • Target

    7ae0efe6574d6662c0a8e4ca59facc3d_JaffaCakes118

  • Size

    361KB

  • MD5

    7ae0efe6574d6662c0a8e4ca59facc3d

  • SHA1

    8018d590037001b2eb512006a9277802dd19b3df

  • SHA256

    d3c68ebad6229b1da92061291639f9b48e3f76fd4c524a9850b4fbb311e180f8

  • SHA512

    63131b0a2c357236b8f5f2f5e7a842ca67541b37fbd7f14b166dbdd1c6a05b055e15d518eb4678c1f2db2284b1158779ddfd849fccf04fd05b4b228c9190cc5d

  • SSDEEP

    6144:q2tv7ERQ+3HwOWOh0ShExAWsodu2cuZjGaDWqsT+FdlWmnA416AQMLY3Znwf4MGK:q0ESoWq07ezAGSS+fJ1pLffuK

  Score

  10^/10

  xloaderscb0discoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2