xloader | 11fe58d7faa05cd255a85be0415f9adac6dfbbf5f03556a48d074a6ef2a2ba7c

General

Target

11fe58d7faa05cd255a85be0415f9adac6dfbbf5f03556a48d074a6ef2a2ba7c
Size

168KB
Sample

241121-ywkj5s1kbj
MD5

ce29de8456065f8f3fd99e40cdf939b6
SHA1

7d2661c9016caaaadceaea33fe4f126a640c3a17
SHA256

11fe58d7faa05cd255a85be0415f9adac6dfbbf5f03556a48d074a6ef2a2ba7c
SHA512

7e09419467848196e93086be6580b4587c5597d20506840acd585798977d42273df1054ed737f39bc3b3d05c8e947a612cfc9fb79d91c0c54505f33f48901b97
SSDEEP

3072:A2JTvj1blSi3CTMqMiChMDJf9/EW9TGmsGnuBVMpzs0:ASVwPMi8219/EW9F/ufyo0

Score

10^/10

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

goma

Decoy

gcs-eu.com

cooler-kitchen.xyz

flisleckies.club

recruitresumelibrary.com

themorningprayer.com

kokbet99.net

isabellemariahwriter.com

mfialias.xyz

sjzjggl.com

khryzmaparis.com

funologists.com

seitzproperties.net

fromdeserttojungle.com

vigwam.com

0xindex.xyz

wwwkan84.net

ramashi.com

noithoigiandonglai.com

bestdictionary.net

498141.com

Targets

- Target
  
  11fe58d7faa05cd255a85be0415f9adac6dfbbf5f03556a48d074a6ef2a2ba7c
- Size
  
  168KB
- MD5
  
  ce29de8456065f8f3fd99e40cdf939b6
- SHA1
  
  7d2661c9016caaaadceaea33fe4f126a640c3a17
- SHA256
  
  11fe58d7faa05cd255a85be0415f9adac6dfbbf5f03556a48d074a6ef2a2ba7c
- SHA512
  
  7e09419467848196e93086be6580b4587c5597d20506840acd585798977d42273df1054ed737f39bc3b3d05c8e947a612cfc9fb79d91c0c54505f33f48901b97
- SSDEEP
  
  3072:A2JTvj1blSi3CTMqMiChMDJf9/EW9TGmsGnuBVMpzs0:ASVwPMi8219/EW9F/ufyo0
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2