Extracted

• • Target

    190bbbb3ef3a08fc73a9d397f87de2ec_JaffaCakes118

  • Size

    1.5MB

  • MD5

    190bbbb3ef3a08fc73a9d397f87de2ec

  • SHA1

    c81ffe08d0c6b7859d5c668fc8a756c8acb0b451

  • SHA256

    6ce6f6c16310e90a3d624750f1d7146aa4d2e8baa04d409133869199d4a5d23a

  • SHA512

    c379b287d4464bd1de5573500733429ea2cb40c45a67a56d90124660961199a4aa00f74dbdf45cab02ca67ce778787ad7b9fe993d59501c5dc869610a82a2f33

  • SSDEEP

    12288:v+q3bFCO9bHBa3AWZavABd0YItKOxZsSbWQdOm//8xLrQ6H+Uy1Susr8MmH3j5:R19bHBiHj6cOxvbWQd9/EFMZZS5R0

  Score

  10^/10

  xloaderm7gsdiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2