General
-
Target
dddddsdsdssds.exe
-
Size
247KB
-
Sample
220118-s38yesbhhq
-
MD5
97221305ce5f05743f46f1998db359ba
-
SHA1
d36634b9ad1fb1ae9f851005572702cad96823af
-
SHA256
cb51f3c16fbd5864ed8b436c89600948cdc76e2c0bf84aca221992f405a77eb9
-
SHA512
029a2d93c5995242a5dbfb28f1640790001af46f7059cc5c1407ae06dde27d56587c0d24069c565c86d6ebfe7160579283c4dcb670840bce4cf6ebe64485872d
Malware Config
Extracted
xloader
2.5
be4o
neonewway.club
kuanghong.club
7bkj.com
ooo-club.com
kamchatka-agency.com
sjsndtvitzru.mobi
noireimpactcollective.net
justbe-event.com
easypeasy.community
southcoast.glass
janhenningsen.com
jmxyjj.com
tarihibilet.com
nagradi7.com
percentrostered.net
certvaxid.com
kingseafoodsydney.com
blacksheepwalk.com
waktuk.com
inteligenciaenrefrigeracion.com
Targets
-
-
Target
dddddsdsdssds.exe
-
Size
247KB
-
MD5
97221305ce5f05743f46f1998db359ba
-
SHA1
d36634b9ad1fb1ae9f851005572702cad96823af
-
SHA256
cb51f3c16fbd5864ed8b436c89600948cdc76e2c0bf84aca221992f405a77eb9
-
SHA512
029a2d93c5995242a5dbfb28f1640790001af46f7059cc5c1407ae06dde27d56587c0d24069c565c86d6ebfe7160579283c4dcb670840bce4cf6ebe64485872d
Score10/10-
Xloader
Xloader is a rebranded version of Formbook malware.
-
suricata: ET MALWARE FormBook CnC Checkin (GET)
suricata: ET MALWARE FormBook CnC Checkin (GET)
-
Xloader Payload
-
Suspicious use of SetThreadContext
-