Extracted

• • Target

    db70d6b73724df85b1a004112b62a8df_JaffaCakes118

  • Size

    805KB

  • MD5

    db70d6b73724df85b1a004112b62a8df

  • SHA1

    357943c19becd73eb82afde209fb31dd6bb5fbfa

  • SHA256

    21663180827caf7f2dfb9bb17db9e9b69ff0a867f2901f148b134d323efb802c

  • SHA512

    12de32c136aa44ab9b4ff4709782a7da3882d47a5a4b48c9c086bc6f73e0904569b3cfd4e1541c9ae94116fe4944f208d230624b724c6938b6fd1daa27b97723

  • SSDEEP

    24576:p3GH3Nbwuns9skinW7xqJ1hiptHs1Y7fybeMoo3M6IF0R1/utasoW:p3GH3Nbwuns9skinWC10M1Yebio86I0K

  Score

  10^/10

  xloaderuszndiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2