Extracted

• • Target

    da18fea88d35935c34972c6d2b532b4b_JaffaCakes118

  • Size

    930KB

  • MD5

    da18fea88d35935c34972c6d2b532b4b

  • SHA1

    5a0ceab83814ba09cf47eb32daf44651ac17cd61

  • SHA256

    8c200639871626b76bf9c568cbb456a304730cffb072dbf8ae36df19db96ed05

  • SHA512

    0c4ad8744a98cea89d103a9563e8c5875380467e9ce2472f4a81b67d3ec587840f3f70d006da70d6021bcc5c27f9815782186e0b9aa4d37fb762e08df877c89a

  • SSDEEP

    12288:WZ3iF2iNeHK7zgzdQ8EjcqwqeXp+LUVxN3XYPCbzIziUV9ZRLsa3pEP7r9r/+pph:63a1bYEjpUg2tXuCbzCV7361q

  Score

  10^/10

  xloaderxcw2discoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2