Overview

overview

10

Static

static

Letter of Intent.exe

windows7_x64

10

Letter of Intent.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Letter of Intent.exe
  • Size 683KB
  • Sample210902-qlnj2saac3
  • SHA256 53c4fbd222a3aba4620b29b93114f02cd13a7dd7aff01a10e702fa2221ebe6f9
  • MD5 SHA1 SHA512
Score
10/10
xloaderm6ssloaderrat

Malware Config

Extracted

Family

  • xloader

Version

  • 2.3

Campaign

  • m6ss

C2

  • http://www.datingexrt.com/m6ss/

Decoy

  • imbracesupportprogram.com

  • movementalways.com

  • gonewlive.com

  • masterygene.com

  • yufhalf.online

  • danieljohnsonstudio.pro

  • w-o-o-s.com

  • lifehub.digital

  • ricomastersonwedding.com

  • xn--g-oeusa6b0f2b4jo965b.xyz

  • cookeimonstr.com

  • gandmtransportation.com

  • aonespices.com

  • musrentals.info

  • nouiu.com

  • nargilehvacuum.com

  • mimik33.com

  • viroorerhoistore.store

  • discoveracvr1.com

  • youressentialwellbeing.com

Targets

    • Target
      Letter of Intent.exe
    • Size 683KB
    • SHA256 53c4fbd222a3aba4620b29b93114f02cd13a7dd7aff01a10e702fa2221ebe6f9
    • MD5 SHA1 SHA512
    Score
    10/10
    xloaderm6ssloaderrat

    • Xloader

      Xloader is a rebranded version of Formbook malware.

      loaderxloader

    • Xloader Payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks