General

  • Target

    3884-258-0x000000000041F270-mapping.dmp

  • Size

    343KB

  • MD5

    c2b2c283796f288c34545bd213bfe779

  • SHA1

    101105494494da20cf244e094a1d9d0c8ec991c1

  • SHA256

    42be8063d2a8062dd50cda86405cf946635b3f8069c35ce2d3affda89b66a7da

  • SHA512

    18bb9237acf2e1b8ecc2cbe7bf603c250bb5305b62d2605fe2923194ae5428ea2de4f7cbb3aa9133cbbbf3724007f9e07580b17c8551c1f11d59ee0f2985e8e5

  • SSDEEP

    6144:9FXG+YWBq1hzKI/ypeZoFP8oTPFXG+YWBq1hzKI/ypeZoFP8oTN:9tc/zK7H8Wtc/zK7H8u

Score
10/10

Malware Config

Extracted

Family

xloader

Version

2.6

Campaign

n6g4

Decoy

bw589jumpb.xyz

lojas-marias.com

gadgersvip.com

zeavd.com

moment4miracles.com

wildcanetours.com

executivetravelandlogistics.com

uspplongee.com

schilova.online

smoothie-optics.com

masterima.net

kickball.site

theastralark.com

nick-sylvestro.com

properscooter.com

wave-thermodynamics.com

bitcollide.com

xed5555.com

tsue-sangyo.com

lucianaejoaoalberto.com

Signatures

  • Xloader Payload 1 IoCs
  • Xloader family

Files

  • 3884-258-0x000000000041F270-mapping.dmp