General
-
Target
SecuriteInfo.com.Trojan.Siggen9.56514.26363.23891
-
Size
579KB
-
Sample
220603-lnrx2aaaaj
-
MD5
c91aa9a10968348566e1a95d4bb154bf
-
SHA1
163e81732286148d7a343dbb3cfd8955bf508475
-
SHA256
9f84afaa4d50d08f5034c9301cbb906d5856a4851623c2a6fac93da1acad8ef8
-
SHA512
3b67041856e9c6c55f8b495ee9684766f4ea459dc5d28a518a1e8181d0e866be7621ebf1c9da41b998223cb7b36a421c670b6dedaa5f5ca0b4a943ed54f29f19
Malware Config
Extracted
xloader
2.6
a8hq
veteransductcleaning.com
beajtjunkies.com
houseofascofi.com
scottsdalemediator.com
atelyadesign.com
profitcase.pro
imtokenio.club
qinglingpai.com
bigsmile-meal.net
daytonlivestream.com
aspiradores10.online
ytybs120.com
hdatelier.com
bearpierce.com
yeson28ca.com
booklearner.com
m8j9.club
mmophamthinhlegend.space
hq4a7o6zb.com
sophiadaki.online
Targets
-
-
Target
SecuriteInfo.com.Trojan.Siggen9.56514.26363.23891
-
Size
579KB
-
MD5
c91aa9a10968348566e1a95d4bb154bf
-
SHA1
163e81732286148d7a343dbb3cfd8955bf508475
-
SHA256
9f84afaa4d50d08f5034c9301cbb906d5856a4851623c2a6fac93da1acad8ef8
-
SHA512
3b67041856e9c6c55f8b495ee9684766f4ea459dc5d28a518a1e8181d0e866be7621ebf1c9da41b998223cb7b36a421c670b6dedaa5f5ca0b4a943ed54f29f19
Score10/10-
Xloader
Xloader is a rebranded version of Formbook malware.
-
Xloader Payload
-
Suspicious use of SetThreadContext
-