Extracted

• • Target

    99bc4a27617c8033e99798b86bf83139_JaffaCakes118

  • Size

    494KB

  • MD5

    99bc4a27617c8033e99798b86bf83139

  • SHA1

    6ae1c65f9659fabf006c073f073cfdbbfe110534

  • SHA256

    ba4821ef0b5dc9843ab5947e85b9810f3a96d0cdf2e9055761dc89f546ae9f93

  • SHA512

    1aea828dd78522e007525d2800b0dac003607c5737437641ab76fc7266cc36dcb9e956f451e7fb060b2c8dcc98271df683a3e316727e58f9291181d2965baf27

  • SSDEEP

    12288:FC0OjH/B15Ow35hQVwXJxcZwnEQ8J0F6zeX7KD/h1ZEk6eP9Ap1kZL:ADjf35Ou7PWvQ8Ja6zee7xv6+AC

  Score

  10^/10

  xloadereaodiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2