xloader | 0dde456e7a0708c5c27cb1343b29e2b268d9245af955205bbfa00cd470a88d98

General

Target

0dde456e7a0708c5c27cb1343b29e2b268d9245af955205bbfa00cd470a88d98
Size

164KB
Sample

241121-y1hakswqaw
MD5

233fd8ca58947a055dd4ad94da32dc40
SHA1

5101ff82ff0acfa085d3509420d7dd56ed2453b6
SHA256

0dde456e7a0708c5c27cb1343b29e2b268d9245af955205bbfa00cd470a88d98
SHA512

61d06a676a73c6ea34f8e9bd15431a0cabdf78c5d6f4aa6039afbab8d4e042802b7e76ec8ee420e176778a9515b7c527b34cdd423750ef1b7a72687bee031f2c
SSDEEP

3072:w8pnZW2IGG3AUwuMnT/eG7yNRvpDVLoRaomAOWaB:wUgdPMn7pmNRvZmfKWaB

Score

10^/10

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

cm5a

Decoy

1sab.claims

autowallet168.com

1500games.com

zasniekrabic.quest

zhjhwjg.com

liberty-roleplay.com

gnaciogerson.com

makiniherbal.com

fondationautes.com

perfectsat.online

nirvanaparrots.com

xbtiyu.com

jamesjalberino.com

valenciamobilenotary.com

safeissueb.com

samarpankota.com

rhubarbporuuz.xyz

oslokolen.com

canceleriatorrez.com

topsecretagencia.com

Targets

- Target
  
  0dde456e7a0708c5c27cb1343b29e2b268d9245af955205bbfa00cd470a88d98
- Size
  
  164KB
- MD5
  
  233fd8ca58947a055dd4ad94da32dc40
- SHA1
  
  5101ff82ff0acfa085d3509420d7dd56ed2453b6
- SHA256
  
  0dde456e7a0708c5c27cb1343b29e2b268d9245af955205bbfa00cd470a88d98
- SHA512
  
  61d06a676a73c6ea34f8e9bd15431a0cabdf78c5d6f4aa6039afbab8d4e042802b7e76ec8ee420e176778a9515b7c527b34cdd423750ef1b7a72687bee031f2c
- SSDEEP
  
  3072:w8pnZW2IGG3AUwuMnT/eG7yNRvpDVLoRaomAOWaB:wUgdPMn7pmNRvZmfKWaB
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2