Overview

overview

10

Static

static

cb38d8143b...b4.exe

windows7_x64

10

cb38d8143b...b4.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cb38d8143b2216edab036acee36f25b4

  • Size

    632KB

  • Sample

    220705-mm81laabh5

  • MD5

    cb38d8143b2216edab036acee36f25b4

  • SHA1

    1401d9123df44612f599865e9b2df8941779c687

  • SHA256

    7fd0e394a9d74592a74d04b3dccf2dcf8457d0e894cadadbf999c327e9b3940e

  • SHA512

    15315313dc0cc805771c7a3ccdf20851e39279a001272cdf71e1078fd7b907d83ffa6fc6292e83743963849ea1b2433036e746c8377edf8f6c9dcb2f76e2f010

Score
10/10
xloaderloaderrat

Malware Config

Targets

    • Target

      cb38d8143b2216edab036acee36f25b4

    • Size

      632KB

    • MD5

      cb38d8143b2216edab036acee36f25b4

    • SHA1

      1401d9123df44612f599865e9b2df8941779c687

    • SHA256

      7fd0e394a9d74592a74d04b3dccf2dcf8457d0e894cadadbf999c327e9b3940e

    • SHA512

      15315313dc0cc805771c7a3ccdf20851e39279a001272cdf71e1078fd7b907d83ffa6fc6292e83743963849ea1b2433036e746c8377edf8f6c9dcb2f76e2f010

    Score
    10/10
    xloaderloaderrat

    • Xloader

      Xloader is a rebranded version of Formbook malware.

      loaderxloader

    • Xloader Payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks