Overview

overview

10

Static

static

AeYNBknvOvHA5AC.exe

windows7_x64

10

AeYNBknvOvHA5AC.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    AeYNBknvOvHA5AC.exe

  • Size

    538KB

  • Sample

    220127-p2x8radce5

  • MD5

    b6fd4235daa49fa3f4ee1b2618edab38

  • SHA1

    07e4b0ea42af774a704455bead341d335a5ef41c

  • SHA256

    b1fdff098dabc1d5beb91484f6f82637f359cb0f7fb4764b282c299c2d341ffa

  • SHA512

    8d7bae24068158ac77128c0d594c32daa130c90d92c7ec6040efd9f86a16688cb9445b6ca570cef3f2e01dfbfe7d5fd5f14b46bed1bf773b368aa2964fc4e666

Score
10/10
xloaderp89mloaderrat

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

p89m

Decoy

wrapapplausechutney.xyz

covidmobiletestingmd.com

convey.gifts

b148tlrfee9evtvorgm5947.com

zmlhtjfls.com

mctrumpthyism.com

lilaixi.store

interstatehardwarenj.com

horakokode.com

42wilsonavenue.com

muskanphysio.com

absoluteuniquecrafts.store

donategame.online

greenlinkengineering.net

pinchanzosloyalty.com

companyintel.network

resumewriterguru.com

oakalleyatcimarron.com

sriyawealthplan.com

mpcollection.online

Targets

    • Target

      AeYNBknvOvHA5AC.exe

    • Size

      538KB

    • MD5

      b6fd4235daa49fa3f4ee1b2618edab38

    • SHA1

      07e4b0ea42af774a704455bead341d335a5ef41c

    • SHA256

      b1fdff098dabc1d5beb91484f6f82637f359cb0f7fb4764b282c299c2d341ffa

    • SHA512

      8d7bae24068158ac77128c0d594c32daa130c90d92c7ec6040efd9f86a16688cb9445b6ca570cef3f2e01dfbfe7d5fd5f14b46bed1bf773b368aa2964fc4e666

    Score
    10/10
    xloaderp89mloaderrat

    • Xloader

      Xloader is a rebranded version of Formbook malware.

      loaderxloader

    • Xloader Payload

      rat

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks