General
-
Target
b9c4bcfffcbd5d4796f1565e8f2c8bb667720d0dc27788bfba632d3b564808e3
-
Size
164KB
-
MD5
21173d8394661823abf705061f2c1ec0
-
SHA1
3f98543167027b8b885785f9ec796c9552c1a954
-
SHA256
b9c4bcfffcbd5d4796f1565e8f2c8bb667720d0dc27788bfba632d3b564808e3
-
SHA512
93d18cb09e2255dd05c5219d9a04f8295449e29673263ab654733b28ce570e35b9ab4e03e80ab05d6a3cdff22adcfc92743965fb8f46b21f3ce19fbaed00ee5d
-
SSDEEP
3072:nepBM2zQwbKAupGCeOtaNkmmllhd6ToOAkCsR2D34f6EHNB:nwQzfpGrqaNkmmlZ6ToOAfsRYSN
Malware Config
Extracted
xloader
2.5
dibu
goodbridging.net
niraprotect.net
dhroad.com
gluenstack.com
atozroofingrepairs.com
slagsnmnd.quest
free020.com
125e13th1108.info
regittracker.com
inbo-usa.com
zepsucsenior.quest
dsyai.club
efelerarea.com
villa-joki.com
metalmask.icu
autorainfiltre.com
yasbeyondcollagen.com
sheetpilinquk.com
kitvirtualger.com
jeremy123.com
Signatures
-
Xloader family
-
Xloader payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b9c4bcfffcbd5d4796f1565e8f2c8bb667720d0dc27788bfba632d3b564808e3
Headers
Sections