Extracted

• • Target

    JaffaCakes118_89451c25a8a7b6183c73bde239f96a2d

  • Size

    627KB

  • MD5

    89451c25a8a7b6183c73bde239f96a2d

  • SHA1

    509e29223f906e5a935d1368cff763e69743a8e8

  • SHA256

    57e48878e957bdbf8966e9da6d0336fb795ee5abb8b856b63517d90de7820b74

  • SHA512

    159c7b95577368da6bb1ad7505075a1762d0c04a9daf4460900598db8134a57a9e509be5415eb1545738e6de33a9c60e4bcd85b0489baae41b4af361acfbb163

  • SSDEEP

    12288:gTBxGPLZfGTRm1TlxBWitODCR9j5l4wZbnQdQLbU8Xg4T9guZl3:gTDGFf6ylWiIGj5l4mbQd18Zg

  Score

  10^/10

  xloaders86jdiscoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2