Extracted

• • Target

    60c1e3543bef5489370f880d332f2358_JaffaCakes118

  • Size

    817KB

  • MD5

    60c1e3543bef5489370f880d332f2358

  • SHA1

    c6c84fe8b32dcbf8fd8ba7da133ed444d6598bf4

  • SHA256

    db49dbfeed349b8c5ac59aab65bd065a7e9d90a1a45bcee96301fae6cfd508ef

  • SHA512

    7a00790a5676984d83686d6822798ed1b5c3078090699d6897a9bacd992c3369e614f623767a8d34062fa9654eb567c491052c486ea7fb9461987b148b36bad0

  • SSDEEP

    24576:t9nGW5brV2HONizwaqD2Ip0ASwVPu00pji1BLOUAWFxu:tj53VN0w2Su

  Score

  10^/10

  xloaderixwndiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2