Extracted

• • Target

    a3471629786819e39c78c4219ae04771_JaffaCakes118

  • Size

    723KB

  • MD5

    a3471629786819e39c78c4219ae04771

  • SHA1

    b94fa145d99416d7c2fed901e83108e257e417eb

  • SHA256

    c0cf68515b3afd73306eaa9c2abdd73f06bfba2943f57fd081e7ae25cfbf7b76

  • SHA512

    24731547612a0ffd8c18e5797a765612fcc9567aed74397a832e9721a14a0b885fd9388ec3724cea038f77c236a72ca7d73946149a1799c75956c7c41c0741ef

  • SSDEEP

    12288:wxojH5jdL/KyCR7PqRo2YQLa3RFC7cvoLTK8bColQVpvlbKmQQUTvSq8MFNBUt:pljBKnRIIQOhKcCTKWlQVhFKmvxqnfBU

  Score

  10^/10

  xloader0togdiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2