Extracted

• • Target

    6775c1a0e4f91e53bae919a76eccd5f4_JaffaCakes118

  • Size

    345KB

  • MD5

    6775c1a0e4f91e53bae919a76eccd5f4

  • SHA1

    1f33995e87e5a954183a1c8022475760d424995f

  • SHA256

    fb45376241224bbbaa4e35e3dbc78d2161e2ec026c10ca3bc93e91710b1a8672

  • SHA512

    9fc290f0a560f0fc73c77b97b4c7705db55f8e072bc25a7f08288dc32dca54b2c81f498396b16534840bd4dabf2619840a27608da13ed1891745f98697b2b34e

  • SSDEEP

    6144:Hrm/WHlvBYuhz7dd/ZUhVAUqqqqqqqqqqqqqqjOJUrk8qtmavEwCfaIc+9TQnqqI:Hrm/WFvBYuhz77ZQVNqqqqqqqqqqqqqM

  Score

  10^/10

  xloaderu8d3discoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2