General

  • Target

    65bd05ff95c28872f1d9efbc67d1609d7536043b6e9adeeb7beee88327defe4b

  • Size

    232KB

  • MD5

    e5d041cdd467e228088308cefa589a13

  • SHA1

    17dc8e2e3636631614feef18a1cca041f0dce787

  • SHA256

    65bd05ff95c28872f1d9efbc67d1609d7536043b6e9adeeb7beee88327defe4b

  • SHA512

    681eb263887f7a4733374b6b62f48fd637cf898981106cff4fd80755576dbde8d771edf26bcebf201ed1ad2c20801ea9db8c78da97b2e503340d581312b06416

  • SSDEEP

    6144:cApYOFMa6i8dwz6T/7uxC/cZDMfEQM0B4f:cih6iYwa7OCof

Score
10/10

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

dgrg

Decoy

iot-vn.com

gamiteisnowjoyned.com

ak8flfqzm8.com

daliborkokic.com

mrk-9.com

tanzibkarate.quest

mburmtdvccti.mobi

thomas-wildlife-control.com

thebritenseries.com

hkkbags.com

redenyl.com

resilientbutterfly.com

nicethelab.com

xn--1lq90isray30ltdc.xn--czru2d

cyberews.net

naclepin2a.xyz

rodrigocoppa.com

hightings.com

chamaaibrasil.com

bdelsaer.com

Signatures

  • Xloader family
  • Xloader payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 65bd05ff95c28872f1d9efbc67d1609d7536043b6e9adeeb7beee88327defe4b
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections