Extracted

• • Target

    5cdcec900819b181a01ea4c007995969_JaffaCakes118

  • Size

    223KB

  • MD5

    5cdcec900819b181a01ea4c007995969

  • SHA1

    d71954224a3c986ac4a7f116d4067d98257cfbb5

  • SHA256

    7fd75617ee39e8ed51f7e118f0aa46b83916dbf0d1d769e088c3fca7a4c0014f

  • SHA512

    e741d7658397cb8f8c581bd3d2c3807b93f9e987ff10668e5d7cea6dee149553392ee32be3983cc4adc9340cfe9ff3915a91faec9ad4a74574c0299d6c4761ad

  • SSDEEP

    3072:1g10r0K/C7MAov2zdV2JE/0unArFJHJlrAlfidgVkmv058mZT6+upQkdO7:1q0rpsMA+krMBBJHJZdnrb6+uQ

  Score

  10^/10

  xloaderieqodiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2