General
-
Target
25e0d7d8ec7b207b6084348d872db814_JaffaCakes118
-
Size
358KB
-
Sample
240329-s34cyabf5t
-
MD5
25e0d7d8ec7b207b6084348d872db814
-
SHA1
3c573c3e4d06748905be128eeb1214eae8a4aded
-
SHA256
00a9f766c47eed9e7b5eb6069a7803bd215ad5513865d675c0e6befb75c4ee0c
-
SHA512
84b344a0bd5bfa0df07d0c90d5a796c85d8ef6b60dfd8fbe662a77aeebe07f1713c2af2e54e8ddcf351fb39076c30dff1a3a063b5091ea202967234a3707d4a3
-
SSDEEP
6144:J+ka80Y2N8IOrJPAZub35+4NsPOrpz/Kc0zGqqX7tNfVXVHQLIiu8cfo0/pW:Jxa8V2N8IVUJ+iAOSzVwZGEX8cA0/M
Malware Config
Extracted
xloader
2.5
bs8f
vasilnikov.com
parkate.club
pol360.com
handmadequatang.com
consult-set.com
nourkoki.com
theveganfusspot.com
dreamssail.com
pinpinyouqian.xyz
satellitphonestore.com
yotosunny.com
telosaolympics.com
gogetemm.com
yozotnpasumo2.xyz
avantgardemarket.com
glenndcp.com
dirtydriverz.com
avaui.com
anchoredtheblog.com
marianaoliveiraarquitetura.com
Targets
-
-
Target
25e0d7d8ec7b207b6084348d872db814_JaffaCakes118
-
Size
358KB
-
MD5
25e0d7d8ec7b207b6084348d872db814
-
SHA1
3c573c3e4d06748905be128eeb1214eae8a4aded
-
SHA256
00a9f766c47eed9e7b5eb6069a7803bd215ad5513865d675c0e6befb75c4ee0c
-
SHA512
84b344a0bd5bfa0df07d0c90d5a796c85d8ef6b60dfd8fbe662a77aeebe07f1713c2af2e54e8ddcf351fb39076c30dff1a3a063b5091ea202967234a3707d4a3
-
SSDEEP
6144:J+ka80Y2N8IOrJPAZub35+4NsPOrpz/Kc0zGqqX7tNfVXVHQLIiu8cfo0/pW:Jxa8V2N8IVUJ+iAOSzVwZGEX8cA0/M
Score10/10-
Xloader
Xloader is a rebranded version of Formbook malware.
-
Xloader payload
-