Extracted

• • Target

    a258ac40b5c62c1ac1124ace071c69dd_JaffaCakes118

  • Size

    1.5MB

  • MD5

    a258ac40b5c62c1ac1124ace071c69dd

  • SHA1

    0933c2e288e682513d149fba882a5734d6164072

  • SHA256

    8b520ce0de0ae8276e9c19053cae465454c94c963834166cfe5b2eb43f6050e4

  • SHA512

    242bf0135b3d3c7ac810b3e869941b65ed196502bb99abd6bc51bd2f2ad229864efe3d465d94e2e2ac23efa5c70262611766b6513e4c09d66da424194f52559d

  • SSDEEP

    12288:X3/OmzXhHYNrG4H/8gA1jg0vbZBrLAkd2CZjjhmnqQ6H+Uy1Susr8MmH3ji:GmThKG4f8njrskUCdtq3ZZS5R0

  Score

  10^/10

  xloadero9pidiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2