General
-
Target
4e05c01fc9dcf68548c55e81728501b4
-
Size
336KB
-
Sample
231226-dc2dbsbdhr
-
MD5
4e05c01fc9dcf68548c55e81728501b4
-
SHA1
d7cb68868ecbc1d386823be8f3c11ce53724cb8d
-
SHA256
8d167481e6f45383f10a657039cfa2bfaa4a29ccf4be55615a1fc57241e26c2d
-
SHA512
afa52666fb6eca90c5ab02389f8495e25d4dbd55864745f22e9439c1d1f2fbdfdc0252fdc5c31e72caa99103bfc3afcf435450c3d64258145b1ab3d971f485e7
-
SSDEEP
6144:c29wiaEfBcDqh3SB/igBKjB9/42u/wISrIRMK+5SS3bL:c5XEfOZ/5KjG4TLQSH
Static task
static1
Behavioral task
behavioral1
Sample
4e05c01fc9dcf68548c55e81728501b4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4e05c01fc9dcf68548c55e81728501b4.exe
Resource
win10v2004-20231222-en
Malware Config
Extracted
xloader
2.3
ftgq
naturalbeautyapparel.com
abtotalsolution.com
periclescapitalmanagement.com
pleasejustdont.com
ryanscode.com
carsandscooters.com
best-polarized-sunglasses.com
hoodshawaii.com
titaefred.com
tomrings.com
swededenoting.host
birthdaytease.com
xaydzn.com
scutganxun.com
gdzhongle.com
alossol.com
shivamshield.com
fashionnailsjohnston.com
jobuelas.com
arvopaert.com
leabsayang.com
lakeviewfashions.com
tekisltd.com
akeromeganutra.com
countdown-yourspecialday.info
altshiftdel.com
xn--80apahn7a.space
travisisyourrealtor.com
zerelle.com
mdmppropertydetroit.com
lilijwood.com
takansampai.com
caibiriji.com
theruthyfoundation.com
lacasitadeeithne.com
markashleycollins.com
illuvoice.com
227592.com
omehaspancakemix.com
darkmad.net
buttonsandchary.com
balkanesport.com
hapax23.com
enniscarter.com
churchdogma.com
katharinarabl.net
pcbboattours.com
gloriousbdreseller.com
dreambuildarchitect.com
4114global.com
probabilisticstatements.info
quliao999.com
ahmed-mohammed.online
caribbeannorthcoast.com
tequilamidnight.com
2-sny68-w2mz.net
teknokablo.com
ozarktek.com
youreternalseen.com
sarahdutra.com
streamcommunitty.com
tweepstats.com
paulautoservices.com
lahamburguesadetuvida.com
mambomakaya.com
Targets
-
-
Target
4e05c01fc9dcf68548c55e81728501b4
-
Size
336KB
-
MD5
4e05c01fc9dcf68548c55e81728501b4
-
SHA1
d7cb68868ecbc1d386823be8f3c11ce53724cb8d
-
SHA256
8d167481e6f45383f10a657039cfa2bfaa4a29ccf4be55615a1fc57241e26c2d
-
SHA512
afa52666fb6eca90c5ab02389f8495e25d4dbd55864745f22e9439c1d1f2fbdfdc0252fdc5c31e72caa99103bfc3afcf435450c3d64258145b1ab3d971f485e7
-
SSDEEP
6144:c29wiaEfBcDqh3SB/igBKjB9/42u/wISrIRMK+5SS3bL:c5XEfOZ/5KjG4TLQSH
-
Xloader payload
-
Suspicious use of SetThreadContext
-