Overview

overview

10

Static

static

10

dump.exe

windows7-x64

10

dump.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b2401ea078603e21a7a086a4ad8ff63cd9671c84d01ad91c38bce23d06a6dd47

  • Size

    109KB

  • MD5

    8469bccd507b0214a44b05ab313e4ddd

  • SHA1

    fa41d2ee6bbf1b105d0f580db373355fdceb7068

  • SHA256

    b2401ea078603e21a7a086a4ad8ff63cd9671c84d01ad91c38bce23d06a6dd47

  • SHA512

    ced00db427a7c6c10056446a4cffa6cc98ef7f7e595b9cd1d64cf4f974aea129f293c5f120930f01b1a78df780c2e1270afb3cf784428643586d3372f4a109b0

  • SSDEEP

    3072:9YCAlbh+mKZ9RMvi/5zWr6TIqZs1pIn5qqRIIKCK:oKZ3t/9o0ZGmnaIKCK

Score
10/10
ratmej0xloader

Malware Config

Extracted

Family

xloader

Version

2.3

Campaign

mej0

Decoy

mtxs8.com

quickskiplondon.com

sltplanner.com

generatedate.com

amsinspections.com

tomrings.com

109friends.com

freelovereading.com

avalapartners.com

nordiqueluxury.com

inmbex.com

everybankatm.com

bo1899.com

ashymeadow.com

pubgm-chickendinner.com

takudolunch.com

carlagremiao.com

actonetheatre.com

wemhealth.com

khasomat.net

Signatures

  • Xloader family
    xloader
  • Xloader payload 1 IoCs
    rat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b2401ea078603e21a7a086a4ad8ff63cd9671c84d01ad91c38bce23d06a6dd47
    .rar
  • dump.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections