Extracted

• • Target

    JaffaCakes118_853ef1dd6f3f39f1cb4730d5b4c92788

  • Size

    481KB

  • MD5

    853ef1dd6f3f39f1cb4730d5b4c92788

  • SHA1

    d21e15ce6e8792f4f643601d1ad1173c87e882be

  • SHA256

    03bef4cce37594b14884c28536f8247413f51286388528e6f0c6c6de27106cde

  • SHA512

    d5f17a2c0d920a843e21a60598080b801acbe966226debd25016651192853c38ca8091a620d328d0c48de31139136a2327cb1fbb9f12821c079e834120b4a50e

  • SSDEEP

    12288:M1nTXR0DY3UKZ9nBkOCOaw30ChpYzVEfFn+rzh1TqvX9slNVH9f3gWo84y626L/T:cnzjqo3j

  Score

  10^/10

  xloaderg2pgdiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2