Extracted

• • Target

    47aad909f498abcb9f6072e2005b65bb_JaffaCakes118

  • Size

    618KB

  • MD5

    47aad909f498abcb9f6072e2005b65bb

  • SHA1

    64a8e622c532535be5a9102d7ccc184208789c05

  • SHA256

    7d256189702c023c5c26bbefb00120cd35be4a832a469869c495758a45dc49a4

  • SHA512

    4224b2b34321f7494388c43d5f694d56ce09477f902c726bbbf576a140d4f7eaa1187dfcbd3e1d4619c54b249d9732ea2eadf9d83f806979ea94c1ba6d513049

  • SSDEEP

    12288:St0Q5JEq/y6INX6LRgU7e943Hjo1bZ3OC5LOjgFJgH86Lr:s0kGq/wKgDGMeQH

  Score

  10^/10

  discoveryxloaderb8euloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1behavioral2