Extracted

• • Target

    JaffaCakes118_3efd0baa42497c7fbdadf1f2dd4c8210

  • Size

    486KB

  • MD5

    3efd0baa42497c7fbdadf1f2dd4c8210

  • SHA1

    48b1f026168871bd602276649508a6b309238802

  • SHA256

    ecf0968be7a904567bfb2406b3bb651e76ae582e357cdc16c448aeec872bc31b

  • SHA512

    ebe4875bb48cadb9bc8ce3a704453ecb599e1742896d473b09c1d310bae2fa6fe506dbf4b857406fc9350e54853e8a34670ffe018f54840b80d2843ddd7748b7

  • SSDEEP

    12288:SrgpMw31pGFf3Fa4Z74uBVfbaLpFJwVev:SGHY3tB4ofWNFJx

  Score

  10^/10

  xloaderb5cediscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2