Extracted

• • Target

    e2aed402a91f870f2d9caf0da11b8efe_JaffaCakes118

  • Size

    501KB

  • MD5

    e2aed402a91f870f2d9caf0da11b8efe

  • SHA1

    0a3e40d8320dceb6bce5e84c1333acfa19909244

  • SHA256

    81868cc802535d46ef3098d7eab8cd3d40ca6e2770e6907a64927506ca43660b

  • SHA512

    afeb2dbd9f0652c4ddcbd8958fbe9e899b98f6e5a05ff54fe36dfaebbbc5998219360e6f5149d43eb2d034a83da68561ada2e2c6682a02353645d32e1bca34ca

  • SSDEEP

    12288:XuKm6ZPfguI59VBBfIqfi7Zk/8woj6edUozH:XuKmwhI59lIOcZfNdUozH

  Score

  10^/10

  xloaderp980discoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2