General
-
Target
cbf76c8bc37dc78fa1564b3885d7da98
-
Size
861KB
-
Sample
220616-g8wz9sfadq
-
MD5
cbf76c8bc37dc78fa1564b3885d7da98
-
SHA1
8b9bb7259038296908bc16bd6ab92bb89fcf2452
-
SHA256
f9eafc2e0d113c33ff2ef3c080001165cde3e53b379662b35643d4cfaab9e25c
-
SHA512
aa69e9d450f8cde01259678c08a5eeae287c4b8754ebbe6fa7a5c8ad6d7db2937984f06af4090856142613007ddd6f95adbc7eca5d23818962b4d16688b5be38
Static task
static1
Behavioral task
behavioral1
Sample
cbf76c8bc37dc78fa1564b3885d7da98.exe
Resource
win7-20220414-en
Malware Config
Extracted
xloader
2.6
n9e0
sezevoa.xyz
fastfoodcolombia.com
sportsonemanagement.com
tuftdayz.com
vastrawomen.com
budgetmattresscenter.com
grocits.com
deadrussiankids.com
cvicleaners.com
snn262.xyz
it-karaduman.net
cnbbanbk.com
bbwylqrqdkpxxa.com
elegantaura.website
hundredplusapps.com
bonsaidou.net
rhodeislandcrush.com
oawys.com
playandswitch.com
namoshr.com
diterimaumum.com
enjoyfoodweightloss.com
ruraldragon.online
powerbi-visuals.com
finehealths.com
qualitymattressdelivered.com
huhuvr520.com
henrymale.com
supply-llc.com
southcarolinapie.com
intanagg.com
veeconnotes.net
gabrielramos.info
muyingdaohang.com
dsimportados.com
silvastic.com
contraconsults.com
highviewrockstheblock.com
onlyscatfans.com
cozycornercat.com
findingpolish.com
pimadur.com
wairoha.com
enystoner.com
huanqiufanli.com
023559.com
adrconfrwasl.com
nftinfosec.com
ankhcoffee.com
aparthq.com
solaryhned.store
investorstable.net
booksforchildren.xyz
vanguardpublicidad.com
tenki-kikou.com
waveflowvan.com
chuchenkeji.net
firstresponsetek.net
wefoundbigfoot.com
cheedough.com
transferitnownow.com
benusen.online
cocoacanvas.art
camillemarinho.com
quest4us.info
Targets
-
-
Target
cbf76c8bc37dc78fa1564b3885d7da98
-
Size
861KB
-
MD5
cbf76c8bc37dc78fa1564b3885d7da98
-
SHA1
8b9bb7259038296908bc16bd6ab92bb89fcf2452
-
SHA256
f9eafc2e0d113c33ff2ef3c080001165cde3e53b379662b35643d4cfaab9e25c
-
SHA512
aa69e9d450f8cde01259678c08a5eeae287c4b8754ebbe6fa7a5c8ad6d7db2937984f06af4090856142613007ddd6f95adbc7eca5d23818962b4d16688b5be38
-
Xloader Payload
-
Suspicious use of SetThreadContext
-