Extracted

• • Target

    e898a31dd8706fc07c5beebfcbb0fb50_JaffaCakes118

  • Size

    459KB

  • MD5

    e898a31dd8706fc07c5beebfcbb0fb50

  • SHA1

    af45bd23f08a00fe163cafffb054a5de191971c6

  • SHA256

    7b31e4beaeb3665a7e4d0575c0ace2d8d025cdca733d5ad293ee3506918cdde5

  • SHA512

    736be24644edd9aa7a4cef499e7cc5a44c2f389bbddd63969e4f2ba8b8ffed9d83634fb17b9950a00cc421be048a3a061ff51c7e57b4111de0d87c5a385c576e

  • SSDEEP

    6144:Ca+fRiOnFuSCxCnkYE8ULQyudfUq58W/U51rmXi:Ca+fRbAC28RyudZJMGy

  Score

  10^/10

  xloaderma5cdiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2