General

  • Target

    1575198d7ad60f56d2a14359f82de8b6d0a5fc3278c1b6dc55716b17873ab54f

  • Size

    506KB

  • Sample

    220208-mal1asfegn

  • MD5

    cbf5cf49954e3eaab9111ff4e3489148

  • SHA1

    7c8a7b42dea1dec8599d5953ce88008f3dfc6aa2

  • SHA256

    1575198d7ad60f56d2a14359f82de8b6d0a5fc3278c1b6dc55716b17873ab54f

  • SHA512

    ef40ab7bde5bfd0bab99132b81f4886540f655403ad84bb053764b0bc630444f265595d11951d3f01ead8db095178fcabb05d8746201ee1ded31478d6c3d99b1

Score
10/10

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

s9ne

Decoy

digital-performance-award.com

fioratti.xyz

designluxre.com

cngangdun.com

restaurantperladelmare.com

davinci65.info

glossmans.com

firstsmileimaging.com

indevmobility.biz

mvptcodesupport.com

crustenc.net

raleighsportsacademy.com

boytoyporn.com

rojaspass.com

acmepaysage.fr

shopatdean.xyz

leonergsteve18870.com

elnahuel.com

ils.network

canto-libero.com

Targets

    • Target

      1575198d7ad60f56d2a14359f82de8b6d0a5fc3278c1b6dc55716b17873ab54f

    • Size

      506KB

    • MD5

      cbf5cf49954e3eaab9111ff4e3489148

    • SHA1

      7c8a7b42dea1dec8599d5953ce88008f3dfc6aa2

    • SHA256

      1575198d7ad60f56d2a14359f82de8b6d0a5fc3278c1b6dc55716b17873ab54f

    • SHA512

      ef40ab7bde5bfd0bab99132b81f4886540f655403ad84bb053764b0bc630444f265595d11951d3f01ead8db095178fcabb05d8746201ee1ded31478d6c3d99b1

    Score
    10/10
    • Xloader

      Xloader is a rebranded version of Formbook malware.

    • Xloader Payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks