xloader | dd7c780b9299e0b5507b94577a081c31c10cbb37110ef41cfe6abc831b0b3ca7

General

Target

dd7c780b9299e0b5507b94577a081c31c10cbb37110ef41cfe6abc831b0b3ca7
Size

164KB
Sample

241121-yllz8awkdz
MD5

4dccc2eee9da97610a0ab48e0590205d
SHA1

d02d8b7b0b7e959a01a2cedef3a93b85ba027cf6
SHA256

dd7c780b9299e0b5507b94577a081c31c10cbb37110ef41cfe6abc831b0b3ca7
SHA512

c4cb6f4794c350da59d2c34f8d92842d90a58380a9c8ed2d9deab541570829349538cac920d409399f7c0e7a711597b56330c3a3d344286df05c4c9ddd678504
SSDEEP

3072:MRJQG2rBuOGBIvMlVYLWmBScMNzki/t27wTkbm3LHK0SV:MM6VSMlcWKScMNzk027A5K0SV

Score

10^/10

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

noi6

Decoy

sukiller.com

finistere.today

pipandelli.com

thegulfweek.com

piggoz.com

leofighters.com

hkako.com

rafipuff.store

gxzcgl.com

mayuracaps.com

merry-ux.com

classicalequestrianacademy.com

pancakesawp.club

theinspiredfutures.com

dunkadogllc.com

bklmkm.com

glow-fabric.com

b2bxcal.xyz

autostorageco.com

ellyandjessee.com

Targets

- Target
  
  dd7c780b9299e0b5507b94577a081c31c10cbb37110ef41cfe6abc831b0b3ca7
- Size
  
  164KB
- MD5
  
  4dccc2eee9da97610a0ab48e0590205d
- SHA1
  
  d02d8b7b0b7e959a01a2cedef3a93b85ba027cf6
- SHA256
  
  dd7c780b9299e0b5507b94577a081c31c10cbb37110ef41cfe6abc831b0b3ca7
- SHA512
  
  c4cb6f4794c350da59d2c34f8d92842d90a58380a9c8ed2d9deab541570829349538cac920d409399f7c0e7a711597b56330c3a3d344286df05c4c9ddd678504
- SSDEEP
  
  3072:MRJQG2rBuOGBIvMlVYLWmBScMNzki/t27wTkbm3LHK0SV:MM6VSMlcWKScMNzk027A5K0SV
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2