General
-
Target
0bb660af76cd316fd2dae5a66506a1a7
-
Size
506KB
-
Sample
231230-cy7xkaceal
-
MD5
0bb660af76cd316fd2dae5a66506a1a7
-
SHA1
1765a7f9b76bc22b89a5d74997a54c5c5be28450
-
SHA256
d53bae4b5ce931f64224d180b42eda418516d524ae0623571069c6bc30845fa3
-
SHA512
0551c44663ecc9b5ce8c27999c7b22067fee4c4769a906f42341e666688807d01f7abdad65f6159e0c6104bde20dde028e49496b065bf8147e54da71ae334e1b
-
SSDEEP
12288:S7ixuBYYUltDe9syZLZQ5+SDW1afioyS3+lpq4e7:S7ixufUbCsKLZQ5+SDW1di1/7
Static task
static1
Behavioral task
behavioral1
Sample
0bb660af76cd316fd2dae5a66506a1a7.exe
Resource
win7-20231215-en
Malware Config
Extracted
xloader
2.3
hf9j
jambokid.com
https-sso-btcturk.com
shanghainternational.com
xn--ehq51k.com
articulosalgusto.com
zelayabrothers.com
bestessentialsforhome.com
pretaporterbijoux.com
razorpak.com
tiroljobs24.com
wwwfallguysmobile.com
milehighdoorways.com
ourinternationalstory.com
warriorsgames.com
georgeskieffer.com
wearegrowthhackerz.site
rabbikatz.com
skystonemed.com
salvage-it.com
kvnjob.com
backleach.com
caspianmakan.com
krofaya.com
mountholiday.com
misato-kokuchi.com
mosberger.kim
trollkaren.com
evokeaware.net
esergedrghwebrgqrq.xyz
crosschain.foundation
bite2lose.world
watchesgalery.com
teamabundant.net
vaniella.com
maturedatesclub.com
blancinegrecarnisseria.com
growthswipefile.com
urewsv.com
outlawdelivery.com
bulukx.com
susanwest.net
aa2030.net
gamingforallinc.com
southernjcreations.com
hansemom.com
linksshack.net
renegadecomedytheatre.com
unpassodiverso.info
socaldelicious.com
3kpro.solutions
corekv.com
webberwentzelcapetown.com
rideoffto.com
mymadra.com
huberranner.com
memomethelovinglion.com
alabascule.com
kokorophoto.com
free-boobies.com
dahamy.club
whiskeyxwaffles.com
xn--saintmodel-86a.com
realestate-buyer.com
franztamayovillaserrano.com
searten.com
Targets
-
-
Target
0bb660af76cd316fd2dae5a66506a1a7
-
Size
506KB
-
MD5
0bb660af76cd316fd2dae5a66506a1a7
-
SHA1
1765a7f9b76bc22b89a5d74997a54c5c5be28450
-
SHA256
d53bae4b5ce931f64224d180b42eda418516d524ae0623571069c6bc30845fa3
-
SHA512
0551c44663ecc9b5ce8c27999c7b22067fee4c4769a906f42341e666688807d01f7abdad65f6159e0c6104bde20dde028e49496b065bf8147e54da71ae334e1b
-
SSDEEP
12288:S7ixuBYYUltDe9syZLZQ5+SDW1afioyS3+lpq4e7:S7ixufUbCsKLZQ5+SDW1di1/7
-
Xloader payload
-
Suspicious use of SetThreadContext
-