Extracted

• • Target

    2dc3200f495185676dfd90084607d98d_JaffaCakes118

  • Size

    224KB

  • MD5

    2dc3200f495185676dfd90084607d98d

  • SHA1

    364f68f17d1cc6029a3d005f82dec5be6860ddd1

  • SHA256

    8f7ae878bddc9db468b17bd3b9e741d429ce5ca6f0d07abf6c1018b9fba2afed

  • SHA512

    8ba151672e7ddeb248a2fb704ac41da6b9f55a0c23619be12a1b7df14124496d68a506228eb1da963a9fccc191de184516cd6c491a1d679c0f36843204bb0f4f

  • SSDEEP

    6144:EaF4nLgDtJmIcnfvieOFx9Op9kOOYMG1xCzKcThdCtqBwZzI:L4sbmIcnni/9Op9kOOFG1gzl+t08s

  Score

  10^/10

  xloaderubqxdiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2