xloader | 65bd05ff95c28872f1d9efbc67d1609d7536043b6e9adeeb7beee88327defe4b

General

Target

65bd05ff95c28872f1d9efbc67d1609d7536043b6e9adeeb7beee88327defe4b
Size

232KB
Sample

241121-y2vx3awqgt
MD5

e5d041cdd467e228088308cefa589a13
SHA1

17dc8e2e3636631614feef18a1cca041f0dce787
SHA256

65bd05ff95c28872f1d9efbc67d1609d7536043b6e9adeeb7beee88327defe4b
SHA512

681eb263887f7a4733374b6b62f48fd637cf898981106cff4fd80755576dbde8d771edf26bcebf201ed1ad2c20801ea9db8c78da97b2e503340d581312b06416
SSDEEP

6144:cApYOFMa6i8dwz6T/7uxC/cZDMfEQM0B4f:cih6iYwa7OCof

Score

10^/10

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

dgrg

Decoy

iot-vn.com

gamiteisnowjoyned.com

ak8flfqzm8.com

daliborkokic.com

mrk-9.com

tanzibkarate.quest

mburmtdvccti.mobi

thomas-wildlife-control.com

thebritenseries.com

hkkbags.com

redenyl.com

resilientbutterfly.com

nicethelab.com

xn--1lq90isray30ltdc.xn--czru2d

cyberews.net

naclepin2a.xyz

rodrigocoppa.com

hightings.com

chamaaibrasil.com

bdelsaer.com

Targets

- Target
  
  65bd05ff95c28872f1d9efbc67d1609d7536043b6e9adeeb7beee88327defe4b
- Size
  
  232KB
- MD5
  
  e5d041cdd467e228088308cefa589a13
- SHA1
  
  17dc8e2e3636631614feef18a1cca041f0dce787
- SHA256
  
  65bd05ff95c28872f1d9efbc67d1609d7536043b6e9adeeb7beee88327defe4b
- SHA512
  
  681eb263887f7a4733374b6b62f48fd637cf898981106cff4fd80755576dbde8d771edf26bcebf201ed1ad2c20801ea9db8c78da97b2e503340d581312b06416
- SSDEEP
  
  6144:cApYOFMa6i8dwz6T/7uxC/cZDMfEQM0B4f:cih6iYwa7OCof
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2