General
-
Target
BBVVCCVVB.exe
-
Size
369KB
-
Sample
220119-rrwchsafc9
-
MD5
9f25378bad3a8189597a5f9d420ef70f
-
SHA1
b1202753b1a774249983ac1bca0f1f131c89b6af
-
SHA256
438844112d1161774efd0548c7398ead40d3b61423b9c0329d994dc54a681bde
-
SHA512
780f291fc285af9c24798b07fd17fd975b5a257170227e313c0ece8d7cc2e461be0f5bc22554f01caca2e0fab83d6e8e45c94cef455189c40e124a3946384e4c
Malware Config
Extracted
xloader
2.5
be4o
neonewway.club
kuanghong.club
7bkj.com
ooo-club.com
kamchatka-agency.com
sjsndtvitzru.mobi
noireimpactcollective.net
justbe-event.com
easypeasy.community
southcoast.glass
janhenningsen.com
jmxyjj.com
tarihibilet.com
nagradi7.com
percentrostered.net
certvaxid.com
kingseafoodsydney.com
blacksheepwalk.com
waktuk.com
inteligenciaenrefrigeracion.com
Targets
-
-
Target
BBVVCCVVB.exe
-
Size
369KB
-
MD5
9f25378bad3a8189597a5f9d420ef70f
-
SHA1
b1202753b1a774249983ac1bca0f1f131c89b6af
-
SHA256
438844112d1161774efd0548c7398ead40d3b61423b9c0329d994dc54a681bde
-
SHA512
780f291fc285af9c24798b07fd17fd975b5a257170227e313c0ece8d7cc2e461be0f5bc22554f01caca2e0fab83d6e8e45c94cef455189c40e124a3946384e4c
Score10/10-
Xloader
Xloader is a rebranded version of Formbook malware.
-
Xloader Payload
-
Suspicious use of SetThreadContext
-