General
-
Target
2a69371ccb46bbc07aebe99359fd69b9
-
Size
477KB
-
Sample
210918-ybs1sahgg5
-
MD5
2a69371ccb46bbc07aebe99359fd69b9
-
SHA1
8be1b2e74bb857b130222bf2604fa79952792034
-
SHA256
06db28157cbf8afaef9fada2db963f0a1f81a266512c748dc6ea86d371036900
-
SHA512
fd8089141d3a926e197c3aee2ed4b44798591b0311a5973de3eafc88c1837d9620c413a873c27c579ce133f299926026938601b0784dd50588ca02cf123835af
Malware Config
Extracted
xloader
2.4
uytf
http://www.fasilitatortoefl.com/uytf/
estherestates.online
babyballetwigan.com
ignorantrough.xyz
moominmamalog.com
pasticcerialemmi.com
orangstyle.com
oldwaterfordfarm.com
aiiqiuwnsas.com
youindependents.com
runbank.net
phytolipshine.com
almedmedicalcenter.com
czxzsa.com
yummyblockparty.com
gadgetinfo.info
cloudfolderplayer.com
chowding.com
xn--tarzmbu-ufb.com
danielaasab.com
dreampropertiesluxury.com
Targets
-
-
Target
2a69371ccb46bbc07aebe99359fd69b9
-
Size
477KB
-
MD5
2a69371ccb46bbc07aebe99359fd69b9
-
SHA1
8be1b2e74bb857b130222bf2604fa79952792034
-
SHA256
06db28157cbf8afaef9fada2db963f0a1f81a266512c748dc6ea86d371036900
-
SHA512
fd8089141d3a926e197c3aee2ed4b44798591b0311a5973de3eafc88c1837d9620c413a873c27c579ce133f299926026938601b0784dd50588ca02cf123835af
Score10/10-
Xloader
Xloader is a rebranded version of Formbook malware.
-
Xloader Payload
-
Suspicious use of SetThreadContext
-