Extracted

• • Target

    9426dc9b8f72f909b3942db6eb186f5d_JaffaCakes118

  • Size

    894KB

  • MD5

    9426dc9b8f72f909b3942db6eb186f5d

  • SHA1

    7c95adf813aca090d9df767830885e1af8fb5d7e

  • SHA256

    7c071823d86f7f37eb038add1e274db23c722612d74602e11496d0b4e312103a

  • SHA512

    169b0f951c40c696d7e696ddf473d8a019765e40eabb90b3c6183c4e761d8fdaddf1ec18e4f84a50a9396da53c298958ead92e8fc4135cdb07f45ce87d3d362c

  • SSDEEP

    12288:4se2d4V/0GzmvnITzhgb7ef8M+w8z/FCnkEFKvFxO6zHK7zQWzKboZT0FR:/HSd6Y87w8DFCkPvFxO6+U0KboyR

  Score

  10^/10

  xloaderm6b5discoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2