xloader | 7e0d848072255f7e6a1596f7229fc7d932cbaabac28d6f503da2bd5658eb5a7a

General

Target

7e0d848072255f7e6a1596f7229fc7d932cbaabac28d6f503da2bd5658eb5a7a
Size

168KB
Sample

241121-yw9t2awngv
MD5

afb7b06a5ea180d1f7e54f757c40a881
SHA1

9f42cc949ab7f9858bed19113cdbc939c06b8d4a
SHA256

7e0d848072255f7e6a1596f7229fc7d932cbaabac28d6f503da2bd5658eb5a7a
SHA512

6b25930d5cd7f9d66093cb49e7d98c36b586da3d2b6b38f9089da953b8d3e0db0edffe5c73e3aafd8d8d0f92fd5c90e6fcc5006ac14b57d6a560057bd46f14df
SSDEEP

3072:77psu29X3q09JMhQ3KoGIdTocCaLwe7cyJguXQPkbF:7KTfHMhQ71dToc/7cwV

Score

10^/10

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

mwfc

Decoy

wwwmwrfinancial.com

fastfreightrucking.com

mollyagee.com

crm-harmonysoft.com

bdlancers.net

feelimi.com

lilnasxshops.com

digibizvietnam.com

theodorebfox.com

podalijokte.quest

eotwlive.com

everydayisablessings.com

fexfer.com

regalosyartesania.com

piscineconnect.com

xxkyz.com

haematopoiesis.art

xhxwmw.com

angelawentzmusicstudio.com

mydna.online

Targets

- Target
  
  7e0d848072255f7e6a1596f7229fc7d932cbaabac28d6f503da2bd5658eb5a7a
- Size
  
  168KB
- MD5
  
  afb7b06a5ea180d1f7e54f757c40a881
- SHA1
  
  9f42cc949ab7f9858bed19113cdbc939c06b8d4a
- SHA256
  
  7e0d848072255f7e6a1596f7229fc7d932cbaabac28d6f503da2bd5658eb5a7a
- SHA512
  
  6b25930d5cd7f9d66093cb49e7d98c36b586da3d2b6b38f9089da953b8d3e0db0edffe5c73e3aafd8d8d0f92fd5c90e6fcc5006ac14b57d6a560057bd46f14df
- SSDEEP
  
  3072:77psu29X3q09JMhQ3KoGIdTocCaLwe7cyJguXQPkbF:7KTfHMhQ71dToc/7cwV
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2