xloader | c6a45a31950e6411e6e7a5f517fae302403d664d1228d5a61d84f2d3df5e647a

General

Target

c6a45a31950e6411e6e7a5f517fae302403d664d1228d5a61d84f2d3df5e647a
Size

164KB
Sample

241121-y1x12awqby
MD5

16725e489b9b590a24999a1293ca5b3b
SHA1

d8af49d829c4e3d8e585918f28c449974f9d28e0
SHA256

c6a45a31950e6411e6e7a5f517fae302403d664d1228d5a61d84f2d3df5e647a
SHA512

11d94b74a4ae8ce9d45bea8e06e70ecb057e845a59c3679ecffc45172dd4d0e1fa6d123ae07fc8ee31fdf03871a2371f8e84fa6c08eec9fe9b9a7c002b9d7e6d
SSDEEP

3072:jJxF02t7tzmeXLMR0aoeke9G+QiEQvyCyNtFy:vXTbMC1ne9G+Qi3+NtF

Score

10^/10

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

mj6u

Decoy

litrpgwiki.net

bichill.net

rangersprotocol-sale.com

lj6222.com

instrurent.online

pet-field.com

chosen-novels.com

soul-leaf.com

supraforward.com

hrdsecuritysolutions.com

ccfuydao.com

transactionflow360.com

homesteaders.xyz

sapphirearray.com

swissgroup.investments

capshopnateasy.rest

lanturalperu.com

ooasne.com

yoo-tech.com

uyoplaza.com

Targets

- Target
  
  c6a45a31950e6411e6e7a5f517fae302403d664d1228d5a61d84f2d3df5e647a
- Size
  
  164KB
- MD5
  
  16725e489b9b590a24999a1293ca5b3b
- SHA1
  
  d8af49d829c4e3d8e585918f28c449974f9d28e0
- SHA256
  
  c6a45a31950e6411e6e7a5f517fae302403d664d1228d5a61d84f2d3df5e647a
- SHA512
  
  11d94b74a4ae8ce9d45bea8e06e70ecb057e845a59c3679ecffc45172dd4d0e1fa6d123ae07fc8ee31fdf03871a2371f8e84fa6c08eec9fe9b9a7c002b9d7e6d
- SSDEEP
  
  3072:jJxF02t7tzmeXLMR0aoeke9G+QiEQvyCyNtFy:vXTbMC1ne9G+Qi3+NtF
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2