Overview

overview

10

Static

static

4802545.xs2.dll

windows7_x64

10

4802545.xs2.dll

windows10_x64

10

Resubmissions

18-05-2021 21:02

210518-4nn39mdaee 10

18-05-2021 19:36

210518-pw8287wyc2 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4802545.xs2

  • Size

    110KB

  • Sample

    210518-pw8287wyc2

  • MD5

    cfb94c893280fd1edd40a4c74031727a

  • SHA1

    9bf1f365e14842621854282f976b890478816a77

  • SHA256

    3205ebcea1f138f0171ff3815d594883805b4af48a24bc0d6228d0b0ee12ddb4

  • SHA512

    31b573054e5963c939cab24b48a8610f757ea94eba21c5101f2df3ffd8fc3120327795692feda7d448091a93b4befb389eed48e17662d7f2e3b19cc441a56988

Score
10/10
nloaderloader

Malware Config

Targets

    • Target

      4802545.xs2

    • Size

      110KB

    • MD5

      cfb94c893280fd1edd40a4c74031727a

    • SHA1

      9bf1f365e14842621854282f976b890478816a77

    • SHA256

      3205ebcea1f138f0171ff3815d594883805b4af48a24bc0d6228d0b0ee12ddb4

    • SHA512

      31b573054e5963c939cab24b48a8610f757ea94eba21c5101f2df3ffd8fc3120327795692feda7d448091a93b4befb389eed48e17662d7f2e3b19cc441a56988

    Score
    10/10
    nloaderloader

    • Nloader

      Simple loader that includes the keyword 'campo' in the URL used to download other families.

      loadernloader

    • Nloader Payload

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks