General

  • Target

    ecd1f01723f52279895587b09ea976337eec2decd700b02d70edd708ca6a857c

  • Size

    164KB

  • Sample

    241121-2fekqsylfw

  • MD5

    794d98c16c6f12a16b177e5a7b013021

  • SHA1

    df951fc374d7408fbc6eb6390a6ad2dfabcacdb0

  • SHA256

    ecd1f01723f52279895587b09ea976337eec2decd700b02d70edd708ca6a857c

  • SHA512

    667df4a8504c25f17db8e93512104d29f5431a0505ce69c0bf199f4e2b3ea3207694a037c6202d3a8a9b03f5bc3bb46bb0250f217f40c258a17551bfafedef0e

  • SSDEEP

    3072:SJgT32vJsLmol4M+7bt10H9JdBLz3DHmtvw9A7L2R/SUY0T9:hTWuiM+H30H9JdBL/eveAn2RHY0T

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

p89m

Decoy

wrapapplausechutney.xyz

covidmobiletestingmd.com

convey.gifts

b148tlrfee9evtvorgm5947.com

zmlhtjfls.com

mctrumpthyism.com

lilaixi.store

interstatehardwarenj.com

horakokode.com

42wilsonavenue.com

muskanphysio.com

absoluteuniquecrafts.store

donategame.online

greenlinkengineering.net

pinchanzosloyalty.com

companyintel.network

resumewriterguru.com

oakalleyatcimarron.com

sriyawealthplan.com

mpcollection.online

Targets

    • Target

      ecd1f01723f52279895587b09ea976337eec2decd700b02d70edd708ca6a857c

    • Size

      164KB

    • MD5

      794d98c16c6f12a16b177e5a7b013021

    • SHA1

      df951fc374d7408fbc6eb6390a6ad2dfabcacdb0

    • SHA256

      ecd1f01723f52279895587b09ea976337eec2decd700b02d70edd708ca6a857c

    • SHA512

      667df4a8504c25f17db8e93512104d29f5431a0505ce69c0bf199f4e2b3ea3207694a037c6202d3a8a9b03f5bc3bb46bb0250f217f40c258a17551bfafedef0e

    • SSDEEP

      3072:SJgT32vJsLmol4M+7bt10H9JdBLz3DHmtvw9A7L2R/SUY0T9:hTWuiM+H30H9JdBL/eveAn2RHY0T

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks