Extracted

• • Target

    42d14493d70781dbb667f48ed49b3883_JaffaCakes118

  • Size

    1.5MB

  • MD5

    42d14493d70781dbb667f48ed49b3883

  • SHA1

    2a636e319dc2c246b45cacff8391d7fcf071281f

  • SHA256

    013ae675443decd1083ec918ee62b59dfc8b3e17e41f96f4be21c3260a2f372b

  • SHA512

    1bf6eba2199570437e877f7f8708434d1b7aec9300d1e24105e5af8f4a9b3faf079931a72fd20bbead7706bf7cdf65464d5db87b61fe561724f42a07044e64f8

  • SSDEEP

    24576:swVbBEwUQK6Q+phT6OUK7vtZmih+MZZS5R0:BbBEp9+qOYM3B

  Score

  10^/10

  discoveryxloaderp2ioloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2