General

  • Target

    3704-315-0x0000000000450000-0x0000000000479000-memory.dmp

  • Size

    164KB

  • MD5

    61ce18bd2cf2da1e8acd8a44c1288470

  • SHA1

    f1a4ff136446206ca13e5666bf3aea2fb37f74e7

  • SHA256

    7f183cec4b6d3da3b8e2bd61abf065cc6e4048135c8a806ddcbb05bc6fae8d14

  • SHA512

    e4d34cb13f081e2ed03fccef6a8c6ab91cb77172d9606658f8c45dd0d7b222d05b5becf53b0fbea1ac912eeba0012793d98832e6b3f6f3c12eedb89358e0e1df

  • SSDEEP

    3072:JhYTpfE220vyTdHGM/pvANOhY9vAeRz08wqxRFcaHxE:MtpimM/hMIY9vAqz08bzrG

Score
10/10

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

euv4

Decoy

anniebapartments.com

hagenbicycles.com

herbalist101.com

southerncorrosion.net

kuechenpruefer.com

tajniezdrzi.quest

segurofunerarioar.com

boardsandbeamsdecor.com

alifdanismanlik.com

pkem.top

mddc.clinic

handejqr.com

crux-at.com

awp.email

hugsforbubbs.com

cielotherepy.com

turkcuyuz.com

teamidc.com

lankasirinspa.com

68135.online

Signatures

  • Xloader family
  • Xloader payload 1 IoCs

Files

  • 3704-315-0x0000000000450000-0x0000000000479000-memory.dmp