General
-
Target
0b3fffd1de700b6d54df6bd954e66c523292484ce0686fb0ae5750b57734a0dd
-
Size
264KB
-
Sample
220727-2x23csebg3
-
MD5
f4f6a0f06ad4b8365f2cca9ba179c7e7
-
SHA1
6d15de8936b8ec906986528ddf0591073b0f4dab
-
SHA256
0b3fffd1de700b6d54df6bd954e66c523292484ce0686fb0ae5750b57734a0dd
-
SHA512
47f78bc71e935dbd98e6200a2048a92c97e41187a44f17a3b425daf314d347318f1c1aa65f34ec82ae1ed81e62912bc718caa6c1b3e6b6de13693cb1d722faac
Static task
static1
Malware Config
Extracted
xloader
2.6
zgtb
gabriellep.com
honghe4.xyz
anisaofrendas.com
happy-tile.com
thesulkies.com
international-ipo.com
tazeco.info
hhhzzz.xyz
vrmonster.xyz
theearthresidencia.com
sportape.xyz
elshadaibaterias.com
koredeiihibi.com
taxtaa.com
globalcityb.com
fxivcama.com
dagsmith.com
elmar-bhp.com
peakice.net
jhcdjewelry.com
moradagroup.tech
luminantentertainment.com
originalfatfrog.com
istanbulbahis239.com
digismart.cloud
egclass.com
video-raamsdonk.online
enjoyhavoc.online
elegantmuka.com
crememeup.store
gasgangllc.com
worldmarketking.com
johnywan.icu
ctxd089.com
vipbuy-my.com
cboelua.com
sitesv.com
7788tiepin.com
unionfound.com
freecrdditreport.com
symmetrya.online
thinoe.com
line-view.com
immobilien-mj.com
alignedmagic.com
mecontaisso.com
plumberbalanced.com
zhouwuxiawu.com
obokbusinessbootcamp.com
chance-lo.com
jujuskiny.com
kkrcrzyz.xyz
daquan168.com
groupeinvictuscorporation.com
leadswebhosting.com
payphelpcenter950851354.info
subvip60.site
ink-desk.com
luminaurascent.com
jivraj9india.com
topproroofer.com
nxteam.net
can-amexico.com
premhub.club
zs-yaoshi.com
Targets
-
-
Target
0b3fffd1de700b6d54df6bd954e66c523292484ce0686fb0ae5750b57734a0dd
-
Size
264KB
-
MD5
f4f6a0f06ad4b8365f2cca9ba179c7e7
-
SHA1
6d15de8936b8ec906986528ddf0591073b0f4dab
-
SHA256
0b3fffd1de700b6d54df6bd954e66c523292484ce0686fb0ae5750b57734a0dd
-
SHA512
47f78bc71e935dbd98e6200a2048a92c97e41187a44f17a3b425daf314d347318f1c1aa65f34ec82ae1ed81e62912bc718caa6c1b3e6b6de13693cb1d722faac
-
Xloader payload
-
Suspicious use of SetThreadContext
-