Extracted

• • Target

    15dd0af6a94ff8295c72a83ef9bd359a_JaffaCakes118

  • Size

    1.1MB

  • MD5

    15dd0af6a94ff8295c72a83ef9bd359a

  • SHA1

    1e5236e252f24dbe1231cc18aecdfeac6b0d9a1f

  • SHA256

    6931c7d4ab556ccd3cee7b8ddc9107f73551dd8cf5f293ec88d0ded26f52a9f6

  • SHA512

    f5aff225a83d6899c76059f9b7463777278b724118fd928a365cf437a272dfaf6e055168dff5ae8018d243aaa3adef44326b79607755ff26b31553689795cd42

  • SSDEEP

    12288:QWawIfK0f08jrRhidCMrC5Hr6LVEmBFt0ULGZbRSTHh3TS6np1I4vOODhgaPGNSi:HHTSmkWDZvSuPoT3

  Score

  10^/10

  xloaderm6b5discoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2