Overview

overview

10

Static

static

3

see7.exe

windows10-2004-x64

10

Resubmissions

09/09/2024, 22:56

240909-2wsgjavbpp10

25/05/2022, 22:24

220525-2bc64sabbj10

Sharing

Copy URL Twitter E-mail

General

  • Target
    see7.exe
  • Size 574KB
  • Sample240909-2wsgjavbpp
  • SHA256 513624286483a4e172511b412b82445a06eefc904d54de75da656ec1a6f8ae99
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
xloadereidodiscoveryloaderrat

Malware Config

Extracted

Family

  • xloader

Version

  • 2.6

Campaign

  • eido

Decoy

  • revellbb.com

  • tempranillowine.net

  • viralstrategies.info

  • blacktxu.com

  • flfththirdbank.com

  • vaoex.com

  • theselfdirectedinvestor.com

  • vinadelmar.travel

  • othersidejimmythemonkey.com

  • jaguar-landrovercenter-graz.com

  • supremeosterreich.com

  • chatsubs.com

  • free99.design

  • serviciosmvs.com

  • bongmecams.xyz

  • malikwoodson.com

  • onlinegamebox.club

  • 694624.com

  • yeezyzapatos.club

  • istanbul-hairtransplant.com

Targets

    • Target
      see7.exe
    • Size 574KB
    • SHA256 513624286483a4e172511b412b82445a06eefc904d54de75da656ec1a6f8ae99
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    xloadereidodiscoveryloaderrat

    • Xloader

      Xloader is a rebranded version of Formbook malware.

      loaderxloader

    • Xloader payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks