General

  • Target

    d4575689b726d4ec925f20a30a47660b3a5cc4521a7c294582e42a05f4c4046e

  • Size

    164KB

  • Sample

    241121-ysvkyazrgq

  • MD5

    e940d2599e28cac74090360feb9f7366

  • SHA1

    2bc24f04829d6f89732883d09088cdb5dfe40e84

  • SHA256

    d4575689b726d4ec925f20a30a47660b3a5cc4521a7c294582e42a05f4c4046e

  • SHA512

    8e6930368d966682ae19c6ea52787b9e5cda6d3acba50eccc4d81b668b5b1156f315f456df8e0815d3859449a51b767e41473e79e1899a62910b96e8237bd74a

  • SSDEEP

    3072:jKpWaAO2dtwRLFXMORm5jdmPt/d1onhudKmtylkl5sZw4g72:jD3Q9MOkZat/dChudKmukl5sid2

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

itq4

Decoy

worklocalcortland.com

hostydom.tech

ittakegenius.com

clarisfixion.com

totalzerosband.com

shop-for-432.club

exploremytruth.com

skarpaknivar.com

teknikunsur.net

shoppingclick.online

808gang.net

solobookings.com

mikunandina.com

insumedkap.com

kingdomcell.com

qabetalive838475.com

foxyreal.website

filmweltruhr.com

pokibar.com

girassolpresentes.com

Targets

    • Target

      d4575689b726d4ec925f20a30a47660b3a5cc4521a7c294582e42a05f4c4046e

    • Size

      164KB

    • MD5

      e940d2599e28cac74090360feb9f7366

    • SHA1

      2bc24f04829d6f89732883d09088cdb5dfe40e84

    • SHA256

      d4575689b726d4ec925f20a30a47660b3a5cc4521a7c294582e42a05f4c4046e

    • SHA512

      8e6930368d966682ae19c6ea52787b9e5cda6d3acba50eccc4d81b668b5b1156f315f456df8e0815d3859449a51b767e41473e79e1899a62910b96e8237bd74a

    • SSDEEP

      3072:jKpWaAO2dtwRLFXMORm5jdmPt/d1onhudKmtylkl5sZw4g72:jD3Q9MOkZat/dChudKmukl5sid2

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks