Description
Xloader is a rebranded version of Formbook malware.
RFQ#.exe
296KB
211028-rzl4tagecr
3838c43e12f0c22ecf9a9a0c1deb1d30
7b9d8e4a093672411f71f1cf6a7fe6803c61773c
b980dfcce93e9140d8ce71151f2f385026b8cebc195b71055707e1468ad0131b
f0f860a56500b449b29558dc6e8860ce4441cee2612cc22c7cb9aaf5106062e290e3b3313dd0eef55fe1678791992f0502dbda9d0350110b7f7591853445935c
Family | xloader |
Version | 2.5 |
Campaign | unzn |
C2 |
http://www.davanamays.com/unzn/ |
Decoy |
xiulf.com highcountrymortar.com 523561.com marketingagency.tools ganmovie.net nationaalcontactpunt.com sirrbter.com begizas.xyz missimi-fashion.com munixc.info daas.support spaceworbc.com faithtruthresolve.com gymkub.com thegrayverse.xyz artisanmakefurniture.com 029tryy.com ijuubx.biz iphone13promax.club techuniversus.com samrgov.xyz grownupcurl.com sj0755.net beekeeperkit.com richessesabondantes.com xclgjgjh.net webworkscork.com vedepviet365.com bretabeameven.com cdzsmhw.com clearperspective.biz tigrg5g784sh.biz bbezan011.xyz mycar.store mansooralobeidli.com ascensionmemberszoom.com unlimitedrehab.com wozka.top askylarkgoods.com rj793.com prosvalor.com primetimeexpress.com boixosnoisperu.com mmasportgear.com concertiranian.net hyponymys.info maila.one yti0fyic.xyz shashiprayag.com speedprosmotorsports.com |
RFQ#.exe
3838c43e12f0c22ecf9a9a0c1deb1d30
296KB
7b9d8e4a093672411f71f1cf6a7fe6803c61773c
b980dfcce93e9140d8ce71151f2f385026b8cebc195b71055707e1468ad0131b
f0f860a56500b449b29558dc6e8860ce4441cee2612cc22c7cb9aaf5106062e290e3b3313dd0eef55fe1678791992f0502dbda9d0350110b7f7591853445935c
Xloader is a rebranded version of Formbook malware.
suricata: ET MALWARE FormBook CnC Checkin (GET)