Overview

overview

10

Static

static

10

LoanLoader.exe

windows10-2004-x64

10

LoanLoader.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    LoanLoader.exe

  • Size

    87KB

  • MD5

    57c9d443fbc7636dac846a8ffaf5c48a

  • SHA1

    af24dc55c5955f4de5d1422ecfe172bce888b1f5

  • SHA256

    672208b2b22b7ff81cddcc49360b69c6f6f4517dea5b8ac2b22800aa9ca1b403

  • SHA512

    e8317a6a400ad084c2348da5264b491332a53a04c36008b47d92c214f8d48fbf3322fc2018c6a1353e22ff74ba5145a64404cbb303520fb15c88f85072ce42d2

  • SSDEEP

    1536:rzpuIft59HVWHcA/t4X+2mA3W/IFhybFzIlqB4xFH6NbClpLSO4t28nJZw:r55Ao+1A3WOMbFkLFSO4tDjw

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

language-pattern.gl.at.ply.gg:63760

Attributes
  • Install_directory

    %ProgramData%

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • LoanLoader.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections