Extracted

• • Target

    a01ccf9ea1cd42165dcf68211a819193_JaffaCakes118

  • Size

    463KB

  • MD5

    a01ccf9ea1cd42165dcf68211a819193

  • SHA1

    f6bcccfe7a15aa6ec76aa60e27e84f81ce966019

  • SHA256

    cac5a5a1cd604a792b9231fb65fe38110c631873cfa834bf4f43b9418d1ec17f

  • SHA512

    edfe36fbd1238d7249d57efa8922369801144bf64908b1b9607ab387003f40363bad164b00965490b9cb4c0e1fc30a00fcf95916e5afa28b60aa6f5c3e6225fd

  • SSDEEP

    12288:IsZnGIIyuA5qe7RZlSzE7hvaVciuK8Ipuu3AnbSUsFkJ:IsZnGUuvy23LouCSUfJ

  Score

  10^/10

  xloaderma5cdiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2