Extracted

• • Target

    JaffaCakes118_516d474f082a4b5278d13dbf8547d2b7

  • Size

    493KB

  • MD5

    516d474f082a4b5278d13dbf8547d2b7

  • SHA1

    1afddf79556b44091fffe8bcaefcf7945ad17a5e

  • SHA256

    6acd5c9d1f204fc1af1d3e8a67578b3b2c6b58a76346b09efe2dd56a50c78d1b

  • SHA512

    c7d79c0806e9b0caae453230e3a82a8dfe16ed62017f828f913fbff6b7cfbf5739fd911673f87315beb515af1a01ce6c8711023c1bba5d359144bcf48361e06a

  • SSDEEP

    6144:XGxhLpLFI/3v1SE8CBcXVBdXlXx6lVo57lkkdIl+M8HoS:2ZiXpzcXVBdVBWo5xHhMso

  Score

  10^/10

  xloaderfi6adiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2