Overview

overview

10

Static

static

SecuriteIn...59.exe

windows7_x64

10

SecuriteIn...59.exe

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    SecuriteInfo.com.W32.AIDetectNet.01.17459.2026
  • Size 762KB
  • Sample220602-d2gp8adaa2
  • SHA256 b053714ce58eb3396c7b51a3b5c0dea99c92e71b3da65e4de1ea640f6ad4d82d
  • MD5 SHA1 SHA512
Score
10/10
xloadera8hqloaderrat

Malware Config

Extracted

Family

  • xloader

Version

  • 2.6

Campaign

  • a8hq

Decoy

  • veteransductcleaning.com

  • beajtjunkies.com

  • houseofascofi.com

  • scottsdalemediator.com

  • atelyadesign.com

  • profitcase.pro

  • imtokenio.club

  • qinglingpai.com

  • bigsmile-meal.net

  • daytonlivestream.com

  • aspiradores10.online

  • ytybs120.com

  • hdatelier.com

  • bearpierce.com

  • yeson28ca.com

  • booklearner.com

  • m8j9.club

  • mmophamthinhlegend.space

  • hq4a7o6zb.com

  • sophiadaki.online

Targets

    • Target
      SecuriteInfo.com.W32.AIDetectNet.01.17459.2026
    • Size 762KB
    • SHA256 b053714ce58eb3396c7b51a3b5c0dea99c92e71b3da65e4de1ea640f6ad4d82d
    • MD5 SHA1 SHA512
    Score
    10/10
    xloadera8hqloaderrat

    • Xloader

      Xloader is a rebranded version of Formbook malware.

      loaderxloader

    • Xloader Payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks