Extracted

• • Target

    13baeeeb8178269bd06665b3eda11aa6_JaffaCakes118

  • Size

    881KB

  • MD5

    13baeeeb8178269bd06665b3eda11aa6

  • SHA1

    331c45df55d27a8bcd7c37df086627fedc7a9b67

  • SHA256

    4796f50a9d3def8541609e49eecb6edc84da6fa4400fe1c45a7ad0bf8647b6d2

  • SHA512

    48d2c7578a84fd1b34488216fcb45af7e412afcb664dc084420916f05d978118a46a4d2374a545787d232a58d23d50b758b0333b80143fcd8eac79dc19781f34

  • SSDEEP

    12288:TfCKH3q+/608oHK7zW+kAblo/OPKrembiEn7c9inbqsCDTQopSZzp5CkCSNC86:T96b1Q8O7cobTiTQyUCDR

  Score

  10^/10

  xloaderp2iodiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2