Resubmissions

02-09-2021 14:41

210902-r2t77sadd5 10

26-08-2021 20:08

210826-x63p7evsw6 10

26-08-2021 17:01

210826-hhfzsjhlaj 10

General

  • Target

    xloader

  • Size

    124KB

  • Sample

    210826-hhfzsjhlaj

  • MD5

    997af06dda7a3c6d1be2f8cac866c78c

  • SHA1

    fb83d869f476e390277aab16b05aa7f3adc0e841

  • SHA256

    46adfe4740a126455c1a022e835de74f7e3cf59246ca66aa4e878bf52e11645d

  • SHA512

    5df92bfc5ab9392b3f7d66f84f625a0de4fd19a2fa3df61fc5bad0e57cc657e4f86d1d5dac9cc57b98a80815a446edd426cf7a5ea5834e4f7ff338f51781f9bf

Malware Config

Targets

    • Target

      xloader

    • Size

      124KB

    • MD5

      997af06dda7a3c6d1be2f8cac866c78c

    • SHA1

      fb83d869f476e390277aab16b05aa7f3adc0e841

    • SHA256

      46adfe4740a126455c1a022e835de74f7e3cf59246ca66aa4e878bf52e11645d

    • SHA512

      5df92bfc5ab9392b3f7d66f84f625a0de4fd19a2fa3df61fc5bad0e57cc657e4f86d1d5dac9cc57b98a80815a446edd426cf7a5ea5834e4f7ff338f51781f9bf

    • Xloader

      Xloader is a rebranded version of Formbook malware.

    • suricata: ET MALWARE FormBook CnC Checkin (GET)

      suricata: ET MALWARE FormBook CnC Checkin (GET)

    • Xloader Payload

MITRE ATT&CK Matrix

Tasks