General

  • Target

    6d67a904ab2598c872a740bcaebb00b610900fd9c3e63f4451bc2a86af03af1c

  • Size

    164KB

  • Sample

    241121-y495rswrez

  • MD5

    035d340312ea5645fa57444f97ee2d20

  • SHA1

    5901a40c59d547a0d76b1ee2397fe9fba34913cd

  • SHA256

    6d67a904ab2598c872a740bcaebb00b610900fd9c3e63f4451bc2a86af03af1c

  • SHA512

    97e105b812fee82a31a00a37c25ee438d9db40a31545198c26d6455442f7b40dd22221f3d66c047fac99e5ad3dd061d51ceab5a8044f90b9825e3c56dacc3a35

  • SSDEEP

    3072:rTJujjSNCwR6Gvn0MmqjWze2dDxFlSUqXSovFg1ydAEH:r4ar0Mmuoe2dDxZZiFg1yd

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

r0bh

Decoy

karo-tasty.com

canlioyuncuyuz.online

app-demo.xyz

fountainspringscapemay.com

completefuid.com

sideroyalpalacehotel.website

tollesonhouses.com

zjef.top

fuckingmom89.xyz

toituresante.com

arabatas.com

trans-mall.com

davidruperezdorao.com

cspro-lb.com

xiluoxtmcwj.com

medicinaoralbarcelona.com

rayganesh.com

bakosaoje.xyz

8nst.com

nigeriasecurityexpo.com

Targets

    • Target

      6d67a904ab2598c872a740bcaebb00b610900fd9c3e63f4451bc2a86af03af1c

    • Size

      164KB

    • MD5

      035d340312ea5645fa57444f97ee2d20

    • SHA1

      5901a40c59d547a0d76b1ee2397fe9fba34913cd

    • SHA256

      6d67a904ab2598c872a740bcaebb00b610900fd9c3e63f4451bc2a86af03af1c

    • SHA512

      97e105b812fee82a31a00a37c25ee438d9db40a31545198c26d6455442f7b40dd22221f3d66c047fac99e5ad3dd061d51ceab5a8044f90b9825e3c56dacc3a35

    • SSDEEP

      3072:rTJujjSNCwR6Gvn0MmqjWze2dDxFlSUqXSovFg1ydAEH:r4ar0Mmuoe2dDxZZiFg1yd

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks