Extracted

• • Target

    efde85682f97c656375e3f7a2da96c33_JaffaCakes118

  • Size

    226KB

  • MD5

    efde85682f97c656375e3f7a2da96c33

  • SHA1

    484437cd1b6f8fc7984d97023c2e7e4b2b90c077

  • SHA256

    47add606e2f5ed4596bffd9f0345e35164c80071efbb0dc4e7b29d1d62391a6e

  • SHA512

    634f7daa11a80887722e1bd341309bba8fcc78c39a5c562882c65ce0d5edbab180f3de4ec71191a6801d5b1533e85c5bb0e5b1cf01218d5579b81ea2500223cb

  • SSDEEP

    6144:ND8O9Jho9mipRr/n2fkOyGLXZcJMvdSWLOrs+/sd2W:fbhotRn2fjkMOD69

  Score

  10^/10

  xloaderqb4adiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2