General

  • Target

    109a2f3f466aeb01475958a6b9341a4111972d66e988e3d7e0d9e363e23c9a63

  • Size

    168KB

  • Sample

    241121-ykzvpaznhr

  • MD5

    f7a6b99eeb8d755a17a753f0b4bfb319

  • SHA1

    a1df6289c5e49246fc9c0fca75f5d8b10d18881b

  • SHA256

    109a2f3f466aeb01475958a6b9341a4111972d66e988e3d7e0d9e363e23c9a63

  • SHA512

    1d071d18d6c564730b4c83a404f671468a845d6ea3db82148000b8ecd8758b79d9e10170f6240caeb2a4d67b5fa451d83e8134ed468ec4bcfb82b90115d63b5f

  • SSDEEP

    3072:r22JAD9jiqsGlQk2HM/UIU/ITNMU0Qbsbn/epMzIZptHy:r25PfwM//CITNMU0Qbsb/quIZj

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

hte6

Decoy

sfretrofitters.com

sunkissedjourneys.com

buybabysnuggle.com

megin.xyz

westprairiehomes.com

somibel.online

interestinghomedecor.com

xn--vuq01fl6j9juwho.net

kayleav.xyz

stiff-pols.digital

vivamexicopa.com

rick078.xyz

novagridmusic.com

volslibraries.com

ashisbeloved.com

clubfohl.com

jdmgeneralmerchandise.com

partnerbenifits.com

mine4kind.com

leanlogisticsandtransit.com

Targets

    • Target

      109a2f3f466aeb01475958a6b9341a4111972d66e988e3d7e0d9e363e23c9a63

    • Size

      168KB

    • MD5

      f7a6b99eeb8d755a17a753f0b4bfb319

    • SHA1

      a1df6289c5e49246fc9c0fca75f5d8b10d18881b

    • SHA256

      109a2f3f466aeb01475958a6b9341a4111972d66e988e3d7e0d9e363e23c9a63

    • SHA512

      1d071d18d6c564730b4c83a404f671468a845d6ea3db82148000b8ecd8758b79d9e10170f6240caeb2a4d67b5fa451d83e8134ed468ec4bcfb82b90115d63b5f

    • SSDEEP

      3072:r22JAD9jiqsGlQk2HM/UIU/ITNMU0Qbsbn/epMzIZptHy:r25PfwM//CITNMU0Qbsb/quIZj

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks