Extracted

• • Target

    200f1b6cc32e01d765242406ce1cc63a_JaffaCakes118

  • Size

    237KB

  • MD5

    200f1b6cc32e01d765242406ce1cc63a

  • SHA1

    1f8e8097b9ef57eb099a0b9dcc68465e4159c8db

  • SHA256

    9aa14501574506627270d8fd1ffba77663640ade1feba0deabbc9ece1f06c0d6

  • SHA512

    7983cfac2deed7954125c3ec5bef920bde1cb1ca95fa2e5b2e284e34848fc4e2fced7e8bef7ee0e276784d396f212bf5e31cde51be6442a7ee55e26be23e9566

  • SSDEEP

    6144:rKoRJD+6EukNMO09vfjTY8+ZpdZQt9FXFZ0KcSTdUwxAEA8:xRRtKNMv9vrcZpXyFXr555AEA8

  Score

  10^/10

  xloadermpusdiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2