General

  • Target

    979ae95f895648fd9cce9bd6029178dc30c8b1e31a908e2e8c122e81a032ab64

  • Size

    164KB

  • Sample

    241121-yklytszngp

  • MD5

    666f208d62e64b60635ed13bb6917493

  • SHA1

    885cc6d747282a4837ad0aceba4874b9c403a3f2

  • SHA256

    979ae95f895648fd9cce9bd6029178dc30c8b1e31a908e2e8c122e81a032ab64

  • SHA512

    3c3c46ab87821f150769f2708e1c9a278e50d94364d39e4e446f6c03ef00e2aefdc066738176b944676d74fac09d1911a55c2e5ebec12f99992b8ef9f1f5e844

  • SSDEEP

    3072:s6JMhjaf3Y/uxjj/M2r6Vl5pBWRm/gct8q4/7YZNs+Ur5+hp:sNtKTM2rQnnWRm/HOqu7YZNsho

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

g43o

Decoy

karaoke-reunion.com

uclknox.com

kefirinindia.com

huifengnf.com

munchandpiggy.online

kladerasende.quest

balderzone.com

mental-balance-institute.com

buystorlife.com

maestosomuzik.com

txqzkm.com

sturgisbrews.com

lenacrypto.xyz

eq2dm.com

olkeb.com

pasids.com

loconeat.com

galateatalents.com

ajitchry.com

treasuretroveofrecipes.com

Targets

    • Target

      979ae95f895648fd9cce9bd6029178dc30c8b1e31a908e2e8c122e81a032ab64

    • Size

      164KB

    • MD5

      666f208d62e64b60635ed13bb6917493

    • SHA1

      885cc6d747282a4837ad0aceba4874b9c403a3f2

    • SHA256

      979ae95f895648fd9cce9bd6029178dc30c8b1e31a908e2e8c122e81a032ab64

    • SHA512

      3c3c46ab87821f150769f2708e1c9a278e50d94364d39e4e446f6c03ef00e2aefdc066738176b944676d74fac09d1911a55c2e5ebec12f99992b8ef9f1f5e844

    • SSDEEP

      3072:s6JMhjaf3Y/uxjj/M2r6Vl5pBWRm/gct8q4/7YZNs+Ur5+hp:sNtKTM2rQnnWRm/HOqu7YZNsho

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks