Overview

overview

10

Static

static

F30AGnBthja6Ka2.exe

windows7_x64

10

F30AGnBthja6Ka2.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    F30AGnBthja6Ka2.exe

  • Size

    369KB

  • Sample

    211020-2rnyjshfd9

  • MD5

    dfc50ba1caa7b380c83943554b211e37

  • SHA1

    e1cf4a47da954565762310d856d9454ac6fdf1ce

  • SHA256

    dd8fdaec54b12c6195b23601689139226a7500fefbf665b1eb3cf9df3358da5a

  • SHA512

    8f2567adf691fff0820df3d5c595a58b00ad02e154cef5065845ad2c58900b92618fc8a2da5994144f9d5535abfc8e3eeba6cf3d4fa76ad1fa4737e24eb29887

Score
10/10
xloadern35qloaderrat

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

n35q

C2

http://www.24hr.online/n35q/

Decoy

franamunneth.com

lattent.digital

sharynpre.com

recupcolis.com

centraliahome.com

funteefactory.com

acconyschool.com

melissapourturk.com

greenteamunderground.com

ord2route.art

seunicapf.com

sun-8888.com

mountlaketerraceapartment.com

themtop.club

32342230.xyz

starnesportfolio.com

samarpankota.com

diversifiedcontractingla.com

qhrubber.com

bobbelloc.top

Targets

    • Target

      F30AGnBthja6Ka2.exe

    • Size

      369KB

    • MD5

      dfc50ba1caa7b380c83943554b211e37

    • SHA1

      e1cf4a47da954565762310d856d9454ac6fdf1ce

    • SHA256

      dd8fdaec54b12c6195b23601689139226a7500fefbf665b1eb3cf9df3358da5a

    • SHA512

      8f2567adf691fff0820df3d5c595a58b00ad02e154cef5065845ad2c58900b92618fc8a2da5994144f9d5535abfc8e3eeba6cf3d4fa76ad1fa4737e24eb29887

    Score
    10/10
    xloadern35qloaderrat

    • Xloader

      Xloader is a rebranded version of Formbook malware.

      loaderxloader

    • Xloader Payload

      rat

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Command-Line Interface

1
T1059

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks