Extracted

• • Target

    2b60409d0b8a3e063cb2292e9b09c072_JaffaCakes118

  • Size

    821KB

  • MD5

    2b60409d0b8a3e063cb2292e9b09c072

  • SHA1

    4693437d5c29099d69e26f794a312fb475155cb2

  • SHA256

    18b7d102ed7c43b96306fcf3616a4e96add77a7d2c55296dd059f974ef8ddcf5

  • SHA512

    7a7095b535fce6025050b4fe66e06a10396171496d2b0be40998df514182be1d25e758047997727d0c7e632298494d0478ca67467d1fed1db9172677c92237b4

  • SSDEEP

    12288:T/HK7z5v0rzv23iNLnKZYn18ue2A78LZC5bhe8UZt4UbRZ4JDk8JOYMUWXb5pQVQ:udvd3iN0YOuhAgeb48UjBdS7

  Score

  10^/10

  xloaderm6b5discoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2