General

  • Target

    b608ab68be0456f2f6f6b60ae47896b26a77df35590edac630d1d4d2be4d3381

  • Size

    164KB

  • Sample

    241121-yth9aswmgt

  • MD5

    532d16515e668cf0d8c2b64036f97eed

  • SHA1

    cdaad81ae022824b6b6791c06ca23793d2fc2066

  • SHA256

    b608ab68be0456f2f6f6b60ae47896b26a77df35590edac630d1d4d2be4d3381

  • SHA512

    5be42ca4cd373b44f4204425de247fd543b22181fe02e2902a0b2a8bd5d0eedc7cba44a7093c0fa4fa2debd9db872c22207cfba0b7a6a3872bad4d0ec0fded76

  • SSDEEP

    3072:DzpvD2SXmtHsdooMsg7c75k+6VtBebUAxqlgZmIebofoxYAcon9yg:DVR2+dJMsI25k+mtwbUAq+Y/xY9a

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

e3s9

Decoy

sol-labs.com

brillianthide.com

ipswich102.com

ummans.com

chatcure.com

assitante-web.com

buyfudgybombs.com

yilinyk.com

vrchjuhtia.quest

c2spreader.info

4peters.com

nisetrips.com

harrtfordsteam.com

86metaverse.com

metallotherapies.com

sweetsheila.biz

autokeypro.net

leadingporavr.xyz

riseagainthenovel.com

alivewithzyia.com

Targets

    • Target

      b608ab68be0456f2f6f6b60ae47896b26a77df35590edac630d1d4d2be4d3381

    • Size

      164KB

    • MD5

      532d16515e668cf0d8c2b64036f97eed

    • SHA1

      cdaad81ae022824b6b6791c06ca23793d2fc2066

    • SHA256

      b608ab68be0456f2f6f6b60ae47896b26a77df35590edac630d1d4d2be4d3381

    • SHA512

      5be42ca4cd373b44f4204425de247fd543b22181fe02e2902a0b2a8bd5d0eedc7cba44a7093c0fa4fa2debd9db872c22207cfba0b7a6a3872bad4d0ec0fded76

    • SSDEEP

      3072:DzpvD2SXmtHsdooMsg7c75k+6VtBebUAxqlgZmIebofoxYAcon9yg:DVR2+dJMsI25k+mtwbUAq+Y/xY9a

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks