xloader | cde0966cf44f6dacd0b2f725cd9dbb86bd8d64ed5d07323bb03968c3cf5943c4

General

Target

cde0966cf44f6dacd0b2f725cd9dbb86bd8d64ed5d07323bb03968c3cf5943c4
Size

164KB
Sample

241121-yrlxeazrcn
MD5

172cb4549503c6a64ffc88c62eae700d
SHA1

c3b9ab7b7b89f652d5c61e4ecf4556c2d05cbdea
SHA256

cde0966cf44f6dacd0b2f725cd9dbb86bd8d64ed5d07323bb03968c3cf5943c4
SHA512

7bcd1ebbd6fab7e77d1803b51fc95232745d0ef30f4479ee0bff394f56279f24c9c616403f58e8f7c40bd9408d9622588bbd85c407134708256bc7f43e14f460
SSDEEP

3072:lkZ0pGW2gkdWIYsQMUuTRDMt9KSuWjh3ENq6:l+hmAihMUepMt9KSuWG46

Score

10^/10

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

w0ce

Decoy

sourcingsxperts.com

focuscfo-indy.com

wethepeopleshallrise.com

tiendadesdemona.store

qdjpfi.com

redsunyoutube.com

megumi-h-design.com

astrazeneca.wtf

soewdr.com

mvpartillery.com

tokrent.com

prove.claims

pearl.vision

tptokenv.club

therecycledsailcompany.net

himsandhers.jobs

oakfoldingtables.com

hotelgalaxybaruipur.com

jasonkellytattoo.com

memg.xyz

Targets

- Target
  
  cde0966cf44f6dacd0b2f725cd9dbb86bd8d64ed5d07323bb03968c3cf5943c4
- Size
  
  164KB
- MD5
  
  172cb4549503c6a64ffc88c62eae700d
- SHA1
  
  c3b9ab7b7b89f652d5c61e4ecf4556c2d05cbdea
- SHA256
  
  cde0966cf44f6dacd0b2f725cd9dbb86bd8d64ed5d07323bb03968c3cf5943c4
- SHA512
  
  7bcd1ebbd6fab7e77d1803b51fc95232745d0ef30f4479ee0bff394f56279f24c9c616403f58e8f7c40bd9408d9622588bbd85c407134708256bc7f43e14f460
- SSDEEP
  
  3072:lkZ0pGW2gkdWIYsQMUuTRDMt9KSuWjh3ENq6:l+hmAihMUepMt9KSuWG46
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2