xloader | 4944-133-0x0000000000400000-0x000000000042E000-memory[.]dmp

Sharing

Target
4944-133-0x0000000000400000-0x000000000042E000-memory.dmp
Size 184KB
Sample220616-ln231adccm
SHA256 babb1f48b15e8b7d209f8b8862c881ca7572ff50d590b031cc6249834e099425
MD5 5f2e82317513c1dd8767cae5f0334456
SHA1 843ac938ddab331b221d99de6940c732d5b1bcf0
SHA512 e928bd2e0270b1ce5d5ca53a5d563178be86d967316f1164326073547d683d24d02c9eec8e838ecc6c62c277638d1797fa6cf633115ca24e92e81e54b9a30706
SSDEEP 3072:BMMTZoytvEW6xsBmWpq1snUI1w+RBpFSZVLlDYVedR8iyOuT+Ucxx:BMny9CsBc1svqoBpFSZlln5yOuTdcx
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

rat tn61 xloader

Family

Version

Campaign

Decoy

Xloader Payload 1 IoCs

rat

resource	yara_rule
sample	xloader

SHA256 babb1f48b15e8b7d209f8b8862c881ca7572ff50d590b031cc6249834e099425
MD5 5f2e82317513c1dd8767cae5f0334456
SHA1 843ac938ddab331b221d99de6940c732d5b1bcf0
SHA512 e928bd2e0270b1ce5d5ca53a5d563178be86d967316f1164326073547d683d24d02c9eec8e838ecc6c62c277638d1797fa6cf633115ca24e92e81e54b9a30706
SSDEEP 3072:BMMTZoytvEW6xsBmWpq1snUI1w+RBpFSZVLlDYVedR8iyOuT+Ucxx:BMny9CsBc1svqoBpFSZlln5yOuTdcx
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

127680

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths