Extracted

• • Target

    5de16e644095099e744f588690e7e400_JaffaCakes118

  • Size

    229KB

  • MD5

    5de16e644095099e744f588690e7e400

  • SHA1

    0e3dc321554ae6081ee7f4437353457d7360d121

  • SHA256

    26fb8675c58beebfed1a2c246fa5fd658ed0286305dc64683fe4d34b41cc5a66

  • SHA512

    a7087b2f0a294ab4268ec2d498fa23d075de0adf714de81d57d7910135387e12aa90adc50eba183246cc9d834778405818af5630dda6adf968ad25582c2c47b6

  • SSDEEP

    6144:10khhhhhhhhhhhhhN8gBVP+MO4L952L6sCpKN2LKgP1Gkohh8h8mHxpBmPZO:GkhhhhhhhhhhhhhOgvP+MzL95X7P1Ghi

  Score

  10^/10

  xloadernoi6discoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2