Extracted

• • Target

    JaffaCakes118_e2827700e9676ad0d4b734d5f4a221b3

  • Size

    685KB

  • MD5

    e2827700e9676ad0d4b734d5f4a221b3

  • SHA1

    2997b29050c7e44072f886705cbd4be6a3edda97

  • SHA256

    a8ea6b5e7721a2d508d362f9e75fc38fe3b845375c358829ef0604cc2345aa13

  • SHA512

    d16e61c88eb9c32fd1c74b4893fb08092bbca5ae17f4275eecd7bc2352dad0904e4dc603be4747e0a9460507187e2bad78a51ffc055cb9b2b7baebff550abbd2

  • SSDEEP

    12288:FRZHIUoN4rfIpj+fvRwIyizYi98wUpAeeqRVTHOi5xNZEraoosn:F3oUoNe8Knnyij98wieqnt

  Score

  10^/10

  xloaderk8u7discoveryloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader family

    xloader

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2