Extracted

• • Target

    552b42748a41dac8072808184773620f_JaffaCakes118

  • Size

    764KB

  • MD5

    552b42748a41dac8072808184773620f

  • SHA1

    2af0f1a925b9cd1eb9fc65fa06bfba6134182c37

  • SHA256

    f3270afb61ba9b96ebb681a138a5ffb3b38d940e63006bbc70cd5e4f20f9300b

  • SHA512

    8eecec098e76b09a638e68df40c6a1d21b054b1293bf85b4ddc96b3bc7034b3b92698d31dfdd54e3fd032cd490ecea789e65cf0115d3de113c0fd3519449a038

  • SSDEEP

    12288:dOH5JOEPs0Ni1Ml1M1Z+l9eqeZ4Pp8Xqhzjfe4BPB9V8OkQs9Bdr5KBja:gZHP2el1cZIeqeq+XCqaB99kQabZ

  Score

  10^/10

  xloaderp2iodiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2