Extracted

• • Target

    e78a8c49a3846c8224702bdfe143d6b9_JaffaCakes118

  • Size

    567KB

  • MD5

    e78a8c49a3846c8224702bdfe143d6b9

  • SHA1

    f35ee4878252d4a6c38971a0768b2adff12ceffe

  • SHA256

    8f7fa187226287ba3a8858e75b00b021022fbfbc8f1f7ae01557cf692510fe00

  • SHA512

    6902c408ee655a97d3e9c9a056c57716e964f1ef5beaaa40b30a95fad93a8f13167872fa53e7c7a9574c2544ee36f6f2c3bf3fe42063871f0dc89513af0bdc1e

  • SSDEEP

    12288:bEpO29Vm7Fru4efOhizn2MJT6YashlM0JT6YashlMCDvoP:4pXm704Tho2I9ashlV9ashlr8

  Score

  10^/10

  xloadern092discoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2