Extracted

• • Target

    bd5e83c955f9182b2b817fab68cebc47_JaffaCakes118

  • Size

    1.9MB

  • MD5

    bd5e83c955f9182b2b817fab68cebc47

  • SHA1

    d232a8df698fc53cce2c89dbf43a7157f244b51c

  • SHA256

    fc37dadf423f8e7a11742feee96ae0451905ce574e80eb7a1221b044946611eb

  • SHA512

    174004cd0303edc684896ee2b23aa010a1ed0af1a741143ea70ba12e9281319c1383b9861b6df29ad5cd917edcb117325717da5bd42862defb7ca262ac26e51c

  • SSDEEP

    24576:+nwvFd1jDiT4Wo8+sj1sqypu39GWG4UJKW1miLFeCXDMDYE:qwVBWo8zgWG4UJKW1miLFeCXDMDYE

  Score

  10^/10

  xloaderur06discoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2