Extracted

• • Target

    d290eb1458c6e515801fd83cd323903a_JaffaCakes118

  • Size

    676KB

  • MD5

    d290eb1458c6e515801fd83cd323903a

  • SHA1

    a4bd25f262b8a5dedb81b60164e107c81209844e

  • SHA256

    68eccee590ca04be73f6688af965bdd4457579db19fb6cf4da6f397fbd5527dc

  • SHA512

    7027ae384079dc23187859b1646682d15aa6f9dcb496b82235ce832655b993d42cde2341f9229edae6ddcb1f7feb8e53ed90773670133580a68e0a2c8ea44411

  • SSDEEP

    12288:gT4ub1o/0iqutZf1seKt6bLhcViiOWuCc30gqMfE4j7TZ:gTnb1oTtZdQUQiiOWuQgJz

  Score

  10^/10

  xloaderuidrdiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2