Extracted

• • Target

    f2dbb356ab48fcab6f0ef2ceb6d8cebb_JaffaCakes118

  • Size

    917KB

  • MD5

    f2dbb356ab48fcab6f0ef2ceb6d8cebb

  • SHA1

    6de618418c322dd8e9019013658c37523d56a18d

  • SHA256

    73c9e89d51022a4059395c2849313595439ca715a36d7383e9708bc6421aa628

  • SHA512

    0937c20f77486158d7a5583b63d5a98fe86dfbc57e566a417ac7f9c7768c9ebba589bb36f16ee7488e5405fbff34622c0ce07538c2384ccef54b62cf59243a33

  • SSDEEP

    12288:GAkCfhwf7HK7zQUKRqVB2FTBdjgrPSAL+l7VdSlQCVngOXiMzUkBCFI+A:eCzsiVB2N3jQaALtQCVfXTFB

  Score

  10^/10

  xloaderbp39discoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2