Extracted

• • Target

    0250e6bc6bd00b67b62440914f4f9d86_JaffaCakes118

  • Size

    819KB

  • MD5

    0250e6bc6bd00b67b62440914f4f9d86

  • SHA1

    71ccf512311d0dc53e8cee5e05afe4253efee7f2

  • SHA256

    e7d82461eec08c88e23ad2651e86e3a25d113dcce4402ccac789f0cffda7b71d

  • SHA512

    4fc1eba75e8d5207270efa58298771c366c08eaefde275bf1c365a8d0aa9559593b52407d2159131cbfa7d254d558c63bcdd52dc524a8b2151776fbf02e6cb0c

  • SSDEEP

    24576:EbQ+X8+UiDLbRHahtNrcI1UCHNda/wv7L8O3VjW:gCrj1dt2wjL8X

  Score

  10^/10

  xloadercuigdiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2