Extracted

• • Target

    3e94bee073a286e8b446e87a126dde1e_JaffaCakes118

  • Size

    297KB

  • MD5

    3e94bee073a286e8b446e87a126dde1e

  • SHA1

    bf461d7bc78fd36eb06ca49e4e02c3bc06897905

  • SHA256

    85951f6ce24ad0c5e5a73c26b48dca2c9e013b554639e46dbf02bffd56cf1891

  • SHA512

    62f69bdcf76a8d03be76fbc3f9e92690dac88b5bcebb127b0ccf1c5fee63d7c3a22bcf49810ae7294aa2828618e0403a7cc5e61e5b6b492f3704b9e2b456e2a1

  • SSDEEP

    6144:K88JIphcJQgx6nTM0qnI9SIBxbJUvGlTcVvwKEEtWm4O2e1:j8JvJQ7Q3ISwxbJSGlTmEky+

  Score

  10^/10

  xloaderusvrdiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2