Extracted

• • Target

    52bf72d40f8ecc722a7d8d6ae83ad2d9_JaffaCakes118

  • Size

    844KB

  • MD5

    52bf72d40f8ecc722a7d8d6ae83ad2d9

  • SHA1

    cb2013d03a2bf04448b20a5a4aec0a8f979c8d9b

  • SHA256

    d2e29e115cef90f4158d21938c7458762bb01be720156a2f7c8bb8d021704fef

  • SHA512

    b35ff42e9fb56cedd485a0d307a59b4b4568ef9b04f8f4346fe8100becd9604d0e3ea1bb2764f017ef88834d24649ecb93afc8fd653469887f0731c2b0998474

  • SSDEEP

    12288:x1kMHia17eHK7zvdqcFhPfmUxYXNUuki1qcbJdwd2/a:qcTdqMVfd2XNZLbJWES

  Score

  10^/10

  xloaderuqf5discoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2