General
-
Target
Product Details of Mini IOT CASE 2022.exe
-
Size
542KB
-
Sample
220126-ty8yasfga8
-
MD5
899440120e82e6de522d521d8bbfc398
-
SHA1
89b0b37329247a6a329b8e43a39f0e1023482aeb
-
SHA256
dec8cfd95e7f3b0db46981117fe82eb59daab642c20c1e1ecaffe45df22af8c8
-
SHA512
29ba91eae4bfd62148ab213638a72353961489376dd555e45611bb1f06d56bc5a273396d9f93798458ecf9ffade6b34cc0ffa356f92bc1ebcb0d3fd68766fdaf
Malware Config
Extracted
xloader
2.5
s9ne
digital-performance-award.com
fioratti.xyz
designluxre.com
cngangdun.com
restaurantperladelmare.com
davinci65.info
glossmans.com
firstsmileimaging.com
indevmobility.biz
mvptcodesupport.com
crustenc.net
raleighsportsacademy.com
boytoyporn.com
rojaspass.com
acmepaysage.fr
shopatdean.xyz
leonergsteve18870.com
elnahuel.com
ils.network
canto-libero.com
Targets
-
-
Target
Product Details of Mini IOT CASE 2022.exe
-
Size
542KB
-
MD5
899440120e82e6de522d521d8bbfc398
-
SHA1
89b0b37329247a6a329b8e43a39f0e1023482aeb
-
SHA256
dec8cfd95e7f3b0db46981117fe82eb59daab642c20c1e1ecaffe45df22af8c8
-
SHA512
29ba91eae4bfd62148ab213638a72353961489376dd555e45611bb1f06d56bc5a273396d9f93798458ecf9ffade6b34cc0ffa356f92bc1ebcb0d3fd68766fdaf
Score10/10-
Xloader
Xloader is a rebranded version of Formbook malware.
-
Xloader Payload
-
Deletes itself
-
Suspicious use of SetThreadContext
-