Extracted

• • Target

    JaffaCakes118_37983cf849f7f7566b9572d57f0dab0f

  • Size

    477KB

  • MD5

    37983cf849f7f7566b9572d57f0dab0f

  • SHA1

    1fdf342b37fb0f6a3131d29752daf1861523e40d

  • SHA256

    4c20199af53476746b9169321c057437c7341c334d61f496820876d9feb63251

  • SHA512

    f8f1239ad0b2fff3826c366631dc025b31d4f0de8187be70f2ffb9363e435cdef1e9c36897f87e5457a05d6863fb81eadb5c2c031fa837a7b9b19a27337518df

  • SSDEEP

    12288:/AGr1P6zxdW2LrBLlJksRUCjux4LZnZf8o:/LWxk2pXBLDX

  Score

  10^/10

  xloaderk8u7discoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2