General

  • Target

    d0c85ba5e6d88e1e0b5f068f125829b4e224b90be2488f2c21317447dc51fb9e

  • Size

    757KB

  • Sample

    220623-s1dphagec5

  • MD5

    1f65d7826fbcc2d6c50f6c493c901588

  • SHA1

    4290f6b300595e807e8cacd5ff172b0a0f37c845

  • SHA256

    d0c85ba5e6d88e1e0b5f068f125829b4e224b90be2488f2c21317447dc51fb9e

  • SHA512

    e3c15d0229433441300b4e129748c10e966de22c926d641b665a91caf7c371a390004abc24d953a80887be4a791514e1670cb0e8723d6a19ffa5210cd9124f5a

Score
10/10

Malware Config

Targets

    • Target

      d0c85ba5e6d88e1e0b5f068f125829b4e224b90be2488f2c21317447dc51fb9e

    • Size

      757KB

    • MD5

      1f65d7826fbcc2d6c50f6c493c901588

    • SHA1

      4290f6b300595e807e8cacd5ff172b0a0f37c845

    • SHA256

      d0c85ba5e6d88e1e0b5f068f125829b4e224b90be2488f2c21317447dc51fb9e

    • SHA512

      e3c15d0229433441300b4e129748c10e966de22c926d641b665a91caf7c371a390004abc24d953a80887be4a791514e1670cb0e8723d6a19ffa5210cd9124f5a

    Score
    10/10
    • Xloader

      Xloader is a rebranded version of Formbook malware.

    • Xloader Payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks