General

  • Target

    1ba57b42ab6443fb766adb67e187e831f68110a1db04d3026c893fa9460120dc

  • Size

    168KB

  • Sample

    241121-y67gna1pbn

  • MD5

    934ec46327a063dc0c9d10c3c652ed94

  • SHA1

    bf90aed13030059c9d5b7771c373245a8efe5611

  • SHA256

    1ba57b42ab6443fb766adb67e187e831f68110a1db04d3026c893fa9460120dc

  • SHA512

    3b6ccc1be09adb827e8680df2cc5f1c7c08bdcc561e2f07c9ce1693b3159f1b3893c27ade1552082ca2e25720cee1534cfedeed407ecec2683a9cf4ffc9472b9

  • SSDEEP

    3072:R1JIdj2+HwvGXbnTMupH9sAKcIrmkm34vanKWx6Ehq3dfxD5:RQOkTMu19xKcIrmkm34jk6E

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

ng1a

Decoy

followtheformulacoaching.com

pedorc.com

xayinghe.com

cbanccommunity.com

ma-premiere-guitare.com

elite-cuts.com

fritzsisland.com

lumenta.tech

talentpondzambia.com

cimeza-africa.com

palisadestahoeairbnb.com

kelseyandcompany.com

hartvoordehoreca.com

laraegurgel.com

ockhus.com

giuseppedelcampo.com

typicalpodcast.com

65ahhalhof.com

pullmansochil.com

arumugachemicals.com

Targets

    • Target

      1ba57b42ab6443fb766adb67e187e831f68110a1db04d3026c893fa9460120dc

    • Size

      168KB

    • MD5

      934ec46327a063dc0c9d10c3c652ed94

    • SHA1

      bf90aed13030059c9d5b7771c373245a8efe5611

    • SHA256

      1ba57b42ab6443fb766adb67e187e831f68110a1db04d3026c893fa9460120dc

    • SHA512

      3b6ccc1be09adb827e8680df2cc5f1c7c08bdcc561e2f07c9ce1693b3159f1b3893c27ade1552082ca2e25720cee1534cfedeed407ecec2683a9cf4ffc9472b9

    • SSDEEP

      3072:R1JIdj2+HwvGXbnTMupH9sAKcIrmkm34vanKWx6Ehq3dfxD5:RQOkTMu19xKcIrmkm34jk6E

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks