Extracted

• • Target

    4b7da6e31b0c449f0dca6530530774af_JaffaCakes118

  • Size

    1.5MB

  • MD5

    4b7da6e31b0c449f0dca6530530774af

  • SHA1

    9a5b346819b8ca408f0cb42ea9606e6dbaf4c3c4

  • SHA256

    132167fd6c334c13919991a82a38645572a9d58c5f83cb1ddf0fcf41e37d2105

  • SHA512

    b4ae69a243cd6ef9a4cb6b20a17feef88cee045ee393b146b2350b38379cb7cfd7a4b5cedeff976220e3c3253114921ddb033e4ca74d273e06cc3e941e9636d6

  • SSDEEP

    12288:kxVCRNh1fVEwB3ekCkrI6V7aQhP2VcP5cX+uQ6H+Uy1Susr8MmH3ju:8mh1fVEe3ekhIuGyPMcHDZZS5R0

  Score

  10^/10

  xloadersseediscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2