General
-
Target
0997b2cc23e6aa9743c78ccaba88fb036bc03937011a12bbb367e6b457461c0b
-
Size
417KB
-
Sample
211021-1allesbfhj
-
MD5
188a0c1b3179c00fa189e73b772dcd72
-
SHA1
efa12177184000acf7236187b9582ba204ac1387
-
SHA256
0997b2cc23e6aa9743c78ccaba88fb036bc03937011a12bbb367e6b457461c0b
-
SHA512
8feec5cadd9710eda47653eb26041c99b7915d5a664f90b9daabfddb65651be6161c9b21bece2943c8d8ae54a1ec44f6aaabbb1bd964791abe3cc020d771bad0
Malware Config
Extracted
xloader
2.5
wogm
http://www.eygtogel021.com/wogm/
sub-dude.net
repeatcustom.com
goodspaz.com
sinagropuree.com
jyh8886.com
muescabynes.quest
stark.agency
nolimit168.com
hypermediastore.com
arab-xt-pro.com
gruppovimar.com
santamariamoto.express
affaridistribuciones.com
straetah.com
collectionsbyvivi.com
nalainteriores.com
weeklywars.com
insightmyhome.com
ucml.net
herderguru.com
Targets
-
-
Target
0997b2cc23e6aa9743c78ccaba88fb036bc03937011a12bbb367e6b457461c0b
-
Size
417KB
-
MD5
188a0c1b3179c00fa189e73b772dcd72
-
SHA1
efa12177184000acf7236187b9582ba204ac1387
-
SHA256
0997b2cc23e6aa9743c78ccaba88fb036bc03937011a12bbb367e6b457461c0b
-
SHA512
8feec5cadd9710eda47653eb26041c99b7915d5a664f90b9daabfddb65651be6161c9b21bece2943c8d8ae54a1ec44f6aaabbb1bd964791abe3cc020d771bad0
Score10/10-
Xloader
Xloader is a rebranded version of Formbook malware.
-
Xloader Payload
-
Suspicious use of SetThreadContext
-