General

  • Target

    d9986090d140ab4158b3ea662bd9b357ef420ffa9dbfb9f9da58aee8dd23aa68

  • Size

    232KB

  • Sample

    241121-ytgqga1jbp

  • MD5

    143c76f11184e27a6d1b292fa77524b1

  • SHA1

    8b6e1c1de4a7242855e9f97f528c8bfd7f09fc53

  • SHA256

    d9986090d140ab4158b3ea662bd9b357ef420ffa9dbfb9f9da58aee8dd23aa68

  • SHA512

    b72228301b43f7175489f976aaa4d2ec10316bcf56f859b99ce4d2442449c0b6d6748265859e556b77f864c185f3aff1ae0ab01211cf8d90c2b4dded0ecf4b24

  • SSDEEP

    3072:lxJpHjrvms4YAoSqFwM5NMm2tmPv9kZDoItHnpzk2KQY5bCZKCoiRPgOH28iW:ldDFhCM5yNW9kZkItHnpzkfrRERPA

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

arh2

Decoy

anniversaryalert.com

kinship.space

buabdullagroup.com

ghostprotectionagency.com

scion-go-getter.com

skindeepapp.com

kysp3.xyz

bonitaspringshomesearch.com

bestdeals2022.online

themarketingstinger.com

chengkayouxuan.com

fendoremi.com

j-stra.com

klingelecn.net

deluxecarepro.com

huanbaodg.com

mes-dents-blanches.com

solutionsemissionsimplifiee.com

abedbashir.tech

good-collection.store

Targets

    • Target

      d9986090d140ab4158b3ea662bd9b357ef420ffa9dbfb9f9da58aee8dd23aa68

    • Size

      232KB

    • MD5

      143c76f11184e27a6d1b292fa77524b1

    • SHA1

      8b6e1c1de4a7242855e9f97f528c8bfd7f09fc53

    • SHA256

      d9986090d140ab4158b3ea662bd9b357ef420ffa9dbfb9f9da58aee8dd23aa68

    • SHA512

      b72228301b43f7175489f976aaa4d2ec10316bcf56f859b99ce4d2442449c0b6d6748265859e556b77f864c185f3aff1ae0ab01211cf8d90c2b4dded0ecf4b24

    • SSDEEP

      3072:lxJpHjrvms4YAoSqFwM5NMm2tmPv9kZDoItHnpzk2KQY5bCZKCoiRPgOH28iW:ldDFhCM5yNW9kZkItHnpzkfrRERPA

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks