Extracted

• • Target

    6532ecaa0de493983bf8e3714c1e4ecb_JaffaCakes118

  • Size

    401KB

  • MD5

    6532ecaa0de493983bf8e3714c1e4ecb

  • SHA1

    5e445d3f9db27fc3c3d39884bd2dd4b005d1bbc2

  • SHA256

    a1e601d45399b724a7247ca82708d74182923dc096c62031ec80419e26f8e0f6

  • SHA512

    a4ca5713d6761e2031de7521d73ffdc7ec463acc8ecf953d92326323a8ec24e4f620e2fb590f2501610ca2a300132e1bd53111c17170dbe38900833feb22ac65

  • SSDEEP

    6144:R2nii8rmCikLdXJVeqtKcEPUE3iK+5gh6BtlAfn+ENQbr:gii8HJVvtZEMESHJTAfnzm

  Score

  10^/10

  xloaderrqe8discoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2