General
-
Target
542703773513f1b9deff0379dc4af43b
-
Size
510KB
-
Sample
211130-y15qwabec7
-
MD5
542703773513f1b9deff0379dc4af43b
-
SHA1
e200241ddd819a7b54786ef1f08586a762c16e07
-
SHA256
680363927a2469dccde81c28ad5b3532f3f253282aa1aa75c61d6ae5593adb22
-
SHA512
60953f8aa063ac5810b3ad63e29a8c4c9780ecbbe37bfa66a0c10cf9ce0c2227478505e4898c38fd9ee19557c282680c1eb5827c0104b439be71bb3a2323805f
Malware Config
Extracted
xloader
2.5
sb6n
http://www.best5amazon.com/sb6n/
bogosamba.com
inmobiliariapuertalavilla.com
nopressurewellness.com
hairshopamity.com
epicmoments360.com
tutorgpa.com
fucibou.xyz
135631.com
portraydashcam.com
raqsarabia.com
okantis.net
vongquaykimcuongfreefire.online
prodom.online
5537sbishop.info
lisakenneyinc.com
fivetime.xyz
borzv.com
joungla.com
mas-urbano.com
sjczyw.com
Targets
-
-
Target
542703773513f1b9deff0379dc4af43b
-
Size
510KB
-
MD5
542703773513f1b9deff0379dc4af43b
-
SHA1
e200241ddd819a7b54786ef1f08586a762c16e07
-
SHA256
680363927a2469dccde81c28ad5b3532f3f253282aa1aa75c61d6ae5593adb22
-
SHA512
60953f8aa063ac5810b3ad63e29a8c4c9780ecbbe37bfa66a0c10cf9ce0c2227478505e4898c38fd9ee19557c282680c1eb5827c0104b439be71bb3a2323805f
Score10/10-
Xloader
Xloader is a rebranded version of Formbook malware.
-
Xloader Payload
-
Suspicious use of SetThreadContext
-