Extracted

• • Target

    9dd8e6119c8ad37f471755b71f353317_JaffaCakes118

  • Size

    698KB

  • MD5

    9dd8e6119c8ad37f471755b71f353317

  • SHA1

    46b0229b98b19a8aa55fb787d4d2e8761916016b

  • SHA256

    d2b4e8828fcac32ea17740809b54a7a3b9a5e8add2a079f9c78f9fce9c914ce6

  • SHA512

    a5fcb6e43b05c4853faab82ee92be83d70b5e06b1884d2adc437008f549a2c0bec48c97f86d03b34c00a83e3eb4f828ff44167b91580c83dec682e035a843378

  • SSDEEP

    12288:nT5fVK8Iytkk4iQhDqFCixzxtTgkEJpHQvkLVjfNHsiBoGmyFAI9EDsfs:TlI8IIkkzWi1lWpHQqjZ

  Score

  10^/10

  xloaderuszndiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2