Extracted

• • Target

    f0dc88bce28dcc9005164930e94eacd6_JaffaCakes118

  • Size

    212KB

  • MD5

    f0dc88bce28dcc9005164930e94eacd6

  • SHA1

    106681ea8909a2de5732e51868245963f8b87b32

  • SHA256

    2ff45850f2e31480bb0020b00786bc290a3979c3db934975e6d15155ba59b453

  • SHA512

    e1fbc3eb2de600195f7d3d3a6bba1dce0972de504f357dae0ea29308f4a60c6a2211e584e09d2c3dc4070a61d161ec48800e1587c4f7d85723a41652a827b6c6

  • SSDEEP

    3072:fTj5l3felhnSOKlTt/IlxX4VYwiW+faL5ysXTvaledstcYE4xDRv:xREhnKHQ74HRa4QsDvssstcYnZ

  Score

  10^/10

  xloaderidirdiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2