Extracted

• • Target

    c8ca6a9423c0c873479cf9a884725497_JaffaCakes118

  • Size

    863KB

  • MD5

    c8ca6a9423c0c873479cf9a884725497

  • SHA1

    0860f86752935d3fb49f732a05c5adac7886871a

  • SHA256

    639b60ea1b7a45599670bcc009ca98c0dcd5f231f65706b206456fb33e4217d3

  • SHA512

    aa9a8b33ccb7fedb6225832b9e6fc2530b3a4e531eb437d2b2111395952f1480e69b1924ea1766f444f52704f8b2bffe9c26ee58e7b7a5c837129d6f529185db

  • SSDEEP

    24576:p2KdPp9AR95yvnqPXdxVZ0E8ipPd8caAPVZiyy/:HPpKRyvnqPXz0EfPDVZi

  Score

  10^/10

  xloaderp2iodiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2