Behavioral task
behavioral1
Sample
1892-134-0x0000000000400000-0x000000000042C000-memory.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
1892-134-0x0000000000400000-0x000000000042C000-memory.exe
Resource
win10v2004-20220414-en
General
-
Target
1892-134-0x0000000000400000-0x000000000042C000-memory.dmp
-
Size
176KB
-
MD5
1b6e4a165624e9f6f74d4ce36fd91858
-
SHA1
a90cc75f46c114bbd35c87a99390acc44693d364
-
SHA256
0b6c001f271ee7a496b19120fde4a4aa7453a7bcbc9532adc7890463805140a6
-
SHA512
485f302de65e11230bcbf69ba40ce75833fd43c75f096b66f2569e409957fa1fe466f753924ef5ad1a4b34be530be4402c872146987f0bab99d4daf7a711a3e4
-
SSDEEP
3072:n79zkYBxW0I1kO0BmWGO1QytUXsWBZ5UZ5PE1X/iIcTAlFMf3D:n3BaqBl1QyqXBZ5UZ5P6XfPlFMf
Malware Config
Extracted
xloader
2.6
a8hq
veteransductcleaning.com
beajtjunkies.com
houseofascofi.com
scottsdalemediator.com
atelyadesign.com
profitcase.pro
imtokenio.club
qinglingpai.com
bigsmile-meal.net
daytonlivestream.com
aspiradores10.online
ytybs120.com
hdatelier.com
bearpierce.com
yeson28ca.com
booklearner.com
m8j9.club
mmophamthinhlegend.space
hq4a7o6zb.com
sophiadaki.online
sunraiz.site
calorieup.com
vighneshequipments.com
695522z.xyz
xjfhkjy.com
jcpractice.xyz
micahriffle.com
babiezarena.com
heythatstony.com
bmtjt.com
aete.info
yeyeps.com
chafaouihicham.com
globalider.com
uwksu.com
jimmy.technology
theveatchplantation.com
devondarcy.com
suburbpaw.online
ballsfashion.com
devsecops-maturity-analysis.net
naturealizarte.com
jpvuy.icu
algoworksconsulting.com
51jzsy.com
the-arboretum.net
sportsmachine.xyz
kemanewright.com
transporteslatinoberlin.com
multirollup.xyz
anaconda-otome.xyz
cheneiz.net
hillsbororosewoodresidences.com
sanphamgiadinh.xyz
xml-ott.com
aimdistributors.net
powergenaku.com
pt24lotto.info
healthyaging.partners
westsuits.com
decentralwebapp.online
mytropicaldreams.com
pravit-ball.online
northern-lights.info
simcondo.com
Signatures
Files
-
1892-134-0x0000000000400000-0x000000000042C000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 167KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ