General
-
Target
SecuriteInfo.com.W32.AIDetectNet.01.8006.32384
-
Size
1.4MB
-
Sample
220531-nxaq8abag3
-
MD5
57138eb4381bfad492ff92f212cb26a6
-
SHA1
8f579ae5f1809587bb91a01a43288e827f542afc
-
SHA256
174f8ae3d2b924f845a9d1708dbb9dc3e219b21252b14cdcf8c253f2900c7d4f
-
SHA512
10157223dff8f08946f14832e70b31d30954417278c91e7c4d7f57e1a7c4599573a51fe25b747ab5571fe56dec04d30c1b07fcc79466aa28512c377ba6253805
Malware Config
Extracted
xloader
2.6
a8hq
veteransductcleaning.com
beajtjunkies.com
houseofascofi.com
scottsdalemediator.com
atelyadesign.com
profitcase.pro
imtokenio.club
qinglingpai.com
bigsmile-meal.net
daytonlivestream.com
aspiradores10.online
ytybs120.com
hdatelier.com
bearpierce.com
yeson28ca.com
booklearner.com
m8j9.club
mmophamthinhlegend.space
hq4a7o6zb.com
sophiadaki.online
Targets
-
-
Target
SecuriteInfo.com.W32.AIDetectNet.01.8006.32384
-
Size
1.4MB
-
MD5
57138eb4381bfad492ff92f212cb26a6
-
SHA1
8f579ae5f1809587bb91a01a43288e827f542afc
-
SHA256
174f8ae3d2b924f845a9d1708dbb9dc3e219b21252b14cdcf8c253f2900c7d4f
-
SHA512
10157223dff8f08946f14832e70b31d30954417278c91e7c4d7f57e1a7c4599573a51fe25b747ab5571fe56dec04d30c1b07fcc79466aa28512c377ba6253805
Score10/10-
Xloader
Xloader is a rebranded version of Formbook malware.
-
Xloader Payload
-
Suspicious use of SetThreadContext
-