Extracted

• • Target

    2c886fae28caeeeb3b0ada64f64abfb9_JaffaCakes118

  • Size

    1018KB

  • MD5

    2c886fae28caeeeb3b0ada64f64abfb9

  • SHA1

    5c4225d1d2ef320d6d072e37caeba0ee9adf5e4e

  • SHA256

    383996c33dfd88054e6600a885efa9fe7215f81c35eed57dc09fd9321b1ea634

  • SHA512

    5ee1d72608c4580961f6575921752ee4a61d6da34b3540488456e7d7178b5e78afb87df1505dba2225d042f383697f3456d3893ecae1ecaa8ef9c652036622a7

  • SSDEEP

    12288:PXn+cIgEWHNe5Ac3QghPlwxNUuwAcBXt4gM5/Ll:PXHIgEIclkVwAcBg

  Score

  10^/10

  xloaderp2iodiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2