Extracted

• • Target

    36797ec026ef56a9ec2be58f804a11af_JaffaCakes118

  • Size

    850KB

  • MD5

    36797ec026ef56a9ec2be58f804a11af

  • SHA1

    a6e03ddc21b97c6ef50ee69ec95b008fbda67e4d

  • SHA256

    ffb4062f3105628be393872c098765b9a7736911cb8fee4ff571b006a891c8a8

  • SHA512

    d4a3aad5560b683fc05b4ec48399bf6412e233bcece7396377f0684b206f5818b918c3fd73bf108371b361d1361882a1a7fdcd40fea0104de06f94c43a1764f4

  • SSDEEP

    24576:iDZPpbcn+nTZkINpPTE0v1HVp6CHJnhM0:4xtcnc9hfv1HGs+0

  Score

  10^/10

  xloaderm6b5discoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2