Extracted

• • Target

    f85d9eb0cf28a546f016ebce68f9269a_JaffaCakes118

  • Size

    754KB

  • MD5

    f85d9eb0cf28a546f016ebce68f9269a

  • SHA1

    6ed691cc909f17d7c289eec4542a067939877aaf

  • SHA256

    83fb913f2698b853cb1ef1d9bd54bf06c7bd660028f1440d3c080c02ab4b9f1e

  • SHA512

    3c719f6b524d7c2827623ae458e6a405d73229fced90211eab677da4eee936b06c05cade253f32e993dff05334687b64ffa0cc8045fef00b57649dfb92ebdcdd

  • SSDEEP

    12288:vY8iOa950YM/676897lMg5Comh3seWiF9+Q+e6F:/Yw67psg5G3VFdM

  Score

  10^/10

  xloadermej0loaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2