Overview

overview

10

Static

static

10

3ebd03bad3...ef.exe

windows7-x64

1

3ebd03bad3...ef.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ebd03bad32f9a7e32f6e67dcc22252e96df9c7b89f938b20f9f899e9dba7fef

  • Size

    164KB

  • Sample

    241121-y98h5a1qcp

  • MD5

    c3acf98db831feed97d7173cab4cd6db

  • SHA1

    c554e74cc5dc3089be91cd89ce25819fd9593a6a

  • SHA256

    3ebd03bad32f9a7e32f6e67dcc22252e96df9c7b89f938b20f9f899e9dba7fef

  • SHA512

    214d4f64be4f24474bfe46c90e278f2231077bd803cbe87cc7b5ccde8f6a806decaa6c3be5db594a01317b2831ec0a6d0a55ebf159f11ead29c7d157c2853c95

  • SSDEEP

    3072:qJzo2Mi36JxfMdEzpP1aNB6RWvuhU2vvyCYnnxeUfBtD:aLCJMd6pdaNB6RWvWPvvmnRD

Score
10/10
xloadergirediscoveryrat

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

gire

Decoy

homes-eq.com

aaxap.space

aqilxxx.com

coolhomedecorations.win

onemc.agency

canonroeder.com

piratepride.net

6500755.com

mccchurch.online

xn--9ckk2a803ztxqupmq82a.com

dipilot.top

shlingwo.com

vienuongsuaongchua.net

genochannel.com

islamiyahbh.com

cyberturtle.com

interviewthankyouletter.info

peach-esthe.com

pooluzzi.com

shillingforadime.com

Targets

    • Target

      3ebd03bad32f9a7e32f6e67dcc22252e96df9c7b89f938b20f9f899e9dba7fef

    • Size

      164KB

    • MD5

      c3acf98db831feed97d7173cab4cd6db

    • SHA1

      c554e74cc5dc3089be91cd89ce25819fd9593a6a

    • SHA256

      3ebd03bad32f9a7e32f6e67dcc22252e96df9c7b89f938b20f9f899e9dba7fef

    • SHA512

      214d4f64be4f24474bfe46c90e278f2231077bd803cbe87cc7b5ccde8f6a806decaa6c3be5db594a01317b2831ec0a6d0a55ebf159f11ead29c7d157c2853c95

    • SSDEEP

      3072:qJzo2Mi36JxfMdEzpP1aNB6RWvuhU2vvyCYnnxeUfBtD:aLCJMd6pdaNB6RWvWPvvmnRD

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks