General
-
Target
VBCNBEW.exe
-
Size
237KB
-
Sample
240910-2873razdmm
-
MD5
5bac332642f907ed254f85c6b60fa79d
-
SHA1
75a9bef69eb70ae57d7d8735ece203a97f37950e
-
SHA256
ae74b8c9e1f56b45a7cd04935a720d3bb42a5e58d257a648474c89def6b54a01
-
SHA512
8017043cfceba71ad9e42f5bd684e922a16134e023ae84de60fd4a0c94f07e27202e1f0de6a871f907fbb0566d5f38542a0babda6e2e488e3bd38d5bb9e2c6e6
-
SSDEEP
6144:DOmkNEhXdfslyuJPEXyiaKTrz+MJSz19M90U8x:iaXsAu1EXyvUPJS9MGx
Static task
static1
Malware Config
Extracted
xloader
2.6
tqug
sns138.com
hiddenevents.us
plantandseedswap.com
ayomvp.com
buildoaxaca.com
pkxshopingit.website
youdoyoutoys.com
n-musicoffice.com
sushi-yoneki.com
towardstech.com
jerrilynnfike.com
fxivcama.com
202206.com
energrove.com
nohonet.com
deta.group
kristenajohnson.com
russodevleopment.com
liine.me
hiegi.icu
koliya1.com
caspian.energy
pizzeriadonluca.com
jt88888888.com
londonm52.com
prioritycargologistics.net
pillaiuniversity.com
pworldlogistics.com
270riversidedrive10d.com
wizi.tech
theregarded.com
uben.group
piqevou.xyz
scbkb.com
falasp.com
miaouifique.com
vandmhvac.net
slimdownne.com
bsd178.com
jeanhonoremus.com
chilledstartup.com
xyslqckx.com
run-anzx.com
czcionki.xyz
kristennicoledesigns.com
kaidcota.art
zqykj.top
y4learning.com
ctepb9x.com
ilrosso.com
vetlife.pet
mujieber.com
huongvibien.com
direitaparana.com
earthdancefarm.com
everyway.online
optionhumidity.top
quadcountycs.com
akcessoires.com
iwantsoho.com
shopmarket-24.online
cnytwl.com
thybestestates.com
texuka.com
ihq48.beauty
Targets
-
-
Target
VBCNBEW.exe
-
Size
237KB
-
MD5
5bac332642f907ed254f85c6b60fa79d
-
SHA1
75a9bef69eb70ae57d7d8735ece203a97f37950e
-
SHA256
ae74b8c9e1f56b45a7cd04935a720d3bb42a5e58d257a648474c89def6b54a01
-
SHA512
8017043cfceba71ad9e42f5bd684e922a16134e023ae84de60fd4a0c94f07e27202e1f0de6a871f907fbb0566d5f38542a0babda6e2e488e3bd38d5bb9e2c6e6
-
SSDEEP
6144:DOmkNEhXdfslyuJPEXyiaKTrz+MJSz19M90U8x:iaXsAu1EXyvUPJS9MGx
-
Xloader payload
-
Suspicious use of SetThreadContext
-