Extracted

• • Target

    9cdc77013989babedbb49f791225b55c_JaffaCakes118

  • Size

    844KB

  • MD5

    9cdc77013989babedbb49f791225b55c

  • SHA1

    546bf8bf1ad4b9d629076ae1aba710eb06e3d450

  • SHA256

    9ac985172f0449846e538d549c87b676d7b044e6796d80f80685ebda09ac6d25

  • SHA512

    52a9c0e493654e4ef0a0a07d6e81639e14ef364d82f55df7f0288b32c9918f91dc9954ebc8f26fd150cd2a8d9024d263e7ff940e4546374fad35d0686ad070ec

  • SSDEEP

    12288:xyBDejETQe6SF906fNCVuEC9Dqo12W19YmZy214XF6Y9MVAc6eP9:xyBSjEvlv00NpECRRrPZpaFJGVAc6+

  Score

  10^/10

  xloadereaodiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2