Extracted

• • Target

    26eeb1f0e1206232f233d3710729a98a_JaffaCakes118

  • Size

    1.0MB

  • MD5

    26eeb1f0e1206232f233d3710729a98a

  • SHA1

    2f49292e05aa8a155372c0856103131285fae88b

  • SHA256

    ecd73f67ea2121ce3aa6ad9e7a63b5360ee5b928c94b69956d8227f54a951349

  • SHA512

    37b10ee98d3a8775c308d61a88b74a5938815c8bcd272713ab9446a99af68d28ab7e5c06adf03e7a5a9edd4e2bebbfb9c3af0ca5e1df51539a33e30ffa4dc77e

  • SSDEEP

    12288:yccaQxt8aq8vbgDPwFVt2NjFjO+ckz9EIFpR6lyLr4ukkknvlP7r9r/+pppppppb:bGb0wFVMNjs9E6QfEvl1+

  Score

  10^/10

  xloaderxcw2discoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2