Overview

overview

10

Static

static

1

9541217b42...e2.exe

windows7_x64

10

9541217b42...e2.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9541217b4276268f9cf0e6e2f01a08e2

  • Size

    293KB

  • Sample

    211008-jwgqxsdfgr

  • MD5

    9541217b4276268f9cf0e6e2f01a08e2

  • SHA1

    13a47201f67eff232b200ba062f8df9a2af6616c

  • SHA256

    4217bf1cf710804c6b4a7b6a7d03974aaa655e512e3bf854c193feb7b2a8d422

  • SHA512

    b9db81dd7e0526c2b2e6be96e3771c8ae7f28ce691ea40146dafce2ff2002074e55ce01492835a3b35f2906e82d4462205d49a6ad02a8add736bdb202485e8e1

Score
10/10
xloadernohaloaderrat

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

noha

C2

http://www.mglracing.com/noha/

Decoy

iphone13promax.support

trailer-racks.xyz

overseaspoolservice.com

r2d2u.com

dawajeju.com

nextgenproxyvote.com

xn--vhqp8mm8dbtz.group

commonsenserisk.com

cmcqgxtyd.com

data2form.com

bois-applique.com

originallollipop.com

lj0008lj.net

spfldvaccineday.info

phalcosnusa.com

llcmastermachine.com

onlyforu14.rest

bestmarketingautomations.com

officialswitchmusic.com

thepretenseofjustice.com

Targets

    • Target

      9541217b4276268f9cf0e6e2f01a08e2

    • Size

      293KB

    • MD5

      9541217b4276268f9cf0e6e2f01a08e2

    • SHA1

      13a47201f67eff232b200ba062f8df9a2af6616c

    • SHA256

      4217bf1cf710804c6b4a7b6a7d03974aaa655e512e3bf854c193feb7b2a8d422

    • SHA512

      b9db81dd7e0526c2b2e6be96e3771c8ae7f28ce691ea40146dafce2ff2002074e55ce01492835a3b35f2906e82d4462205d49a6ad02a8add736bdb202485e8e1

    Score
    10/10
    xloadernohaloaderrat

    • Xloader

      Xloader is a rebranded version of Formbook malware.

      loaderxloader

    • Xloader Payload

      rat

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks