Extracted

• • Target

    24fa9768014a79d9193de95aebdd6e4f_JaffaCakes118

  • Size

    1.1MB

  • MD5

    24fa9768014a79d9193de95aebdd6e4f

  • SHA1

    68f97655ccf4c14896e259dcee832c048ed130f7

  • SHA256

    b4426970af41450092a479c0f387845540d168f2b3b3f42a1998f83b01997cee

  • SHA512

    01b5362b94c826ab94e06c0bff6e4e3f88eaf4920930de407e1c891c27cd87c8e17318125cdff37e5f69d2886727f4ce863efcbe049717b1a47a2b5894a5ce85

  • SSDEEP

    24576:eueYJhOyF3fDUrFvVYaJJ18jt63rlBIx:LNNLUFDJ1salBIx

  Score

  10^/10

  xloaderp2iodiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2