Extracted

• • Target

    5f49fda84fc5089cedbb50f7ac4eeb18_JaffaCakes118

  • Size

    312KB

  • MD5

    5f49fda84fc5089cedbb50f7ac4eeb18

  • SHA1

    d8d9bd3c19140ff441731d3fdabdac64d74f1417

  • SHA256

    e4bf214f6939dae12a6a479bd64f129509aa74ae46033c1aee210acddb118077

  • SHA512

    34bdc3f84c488618cd02e62d7826459953d80c295661a6ef6912c729cc9214dfe2e50f99dad5c90c21c6c2aaad9eb2e4e05a38047cb755fa16dab5d3acbfa421

  • SSDEEP

    6144:LErqLj2iCjq2yy57+estGu7OAXQNOHW9QUVcLsG2aOkrI:LOBicyuItGu7Ol8lhoGzOL

  Score

  10^/10

  xloaderx9r4discoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2