Description
Xloader is a rebranded version of Formbook malware.
QUOTQTION.zip
424KB
210924-mc171agfdm
a99b952d10143e1d35d96c6b9cb0d0c8
8b93ae5b4a30e11817140014c8519824783657b3
c58d4399f56ac84de6e6aead1750f1f533baea7508199955ce74eee2b7ca3eee
e6136501128034dc3f242b2d8c339a5694fe14abe51dc2a29240f9050e2b779daaa797ea3e815b491fad6e11627bd223beb1d896a8af438726f839a7aa303f48
Family | xloader |
Version | 2.5 |
Campaign | c2ue |
C2 |
http://www.heidevelop.xyz/c2ue/ |
Decoy |
isportdata.com stellarex.energy hsucollections.com menuhaisan.com joe-tzu.com lumichargemktg.com uae.tires rapidcae.com softwaresystemsolutions.com s-galaxy.website daewon-talks.net northgamesnetwork.com catalogue-bouyguestele.com criativanet.com theseasonalshift.com actionfoto.online openmaildoe.com trashpenguin.com ennopure.net azurermine.com wingkingtong.com innovativepropsolutions.com transportesajusco.online rosenblasts.info ttsports.store servpix.com liveatthebiltmore.com magentautil.com aquolly.com collabsales.com bredaslo.com suddisaddu.com www920011a.com uudh.info bleuexpress.com xivuko.com upstatehvacpros.com acami.art thqahql.com mauzabe.com mydrones.net franciseshun.com nrrpri.com adndpanel.xyz straightcorndinner.xyz locngrip.com wgylab.xyz greenmamba100.com dmglobalconsult.net alissanoume.xyz |
QUOTQTION.exe
24736913b455be2ed3d1cc67c767afc4
866KB
8026db0f265178cf013ac579c1b7267f4014bf2c
a109f0b9407728fef1b41d766e8228085ee04661156d84ef543777bf311f450b
49dd3e5ecbf6d4cd310a45d0b52e36a363d701f0a9cc14a1d3c103b613eb5a756fdc9ce8b028d69b56c4c8137d29ea3d57865b4ff75dac44bf982e5c80ee56ee
Xloader is a rebranded version of Formbook malware.
suricata: ET MALWARE FormBook CnC Checkin (GET)