General

  • Target

    87af8674ab74e0ff55dcc018d1111e8d31c27344c9225fb3a0ea1a07ddaf11a1

  • Size

    164KB

  • Sample

    241121-yy7gpa1laq

  • MD5

    bd1cf36597a62d4190beeb3665fa9b62

  • SHA1

    4d6c1e949e671573ba36623e40d3fcc07c6714ef

  • SHA256

    87af8674ab74e0ff55dcc018d1111e8d31c27344c9225fb3a0ea1a07ddaf11a1

  • SHA512

    b0812ecf49ec6e438b50922d7173b752542a641ecdb2f020b64c06527efb3c687c18548fa4471a6fa8703c026e6f83238542697a5cb628c7c2a35b7ef305c284

  • SSDEEP

    3072:hpJr+jnYfH5153zM2XJq3xg4pb1tzTQJ0HN8znU7+pxSnFln4:hHddjM25Yxd1tzTQJ0t8nUapgnP4

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

hxn2

Decoy

janenoelleneedleworks.com

albedocoin.com

helennbendiss47.xyz

democratizabais.xyz

knellarraywoad.com

vehicleweek.com

cablevid.com

sigmagrup.com

cesarchavezeagles.com

centrocomercialgranadahills.com

theherotea.com

ozarkdemure.com

27mpt.xyz

expansionsound.com

fablebuiltbrands.com

rockyzpizzagyro.com

velociget.com

suntioil4u.com

salvationshippingsecurity.com

spares245.com

Targets

    • Target

      87af8674ab74e0ff55dcc018d1111e8d31c27344c9225fb3a0ea1a07ddaf11a1

    • Size

      164KB

    • MD5

      bd1cf36597a62d4190beeb3665fa9b62

    • SHA1

      4d6c1e949e671573ba36623e40d3fcc07c6714ef

    • SHA256

      87af8674ab74e0ff55dcc018d1111e8d31c27344c9225fb3a0ea1a07ddaf11a1

    • SHA512

      b0812ecf49ec6e438b50922d7173b752542a641ecdb2f020b64c06527efb3c687c18548fa4471a6fa8703c026e6f83238542697a5cb628c7c2a35b7ef305c284

    • SSDEEP

      3072:hpJr+jnYfH5153zM2XJq3xg4pb1tzTQJ0HN8znU7+pxSnFln4:hHddjM25Yxd1tzTQJ0t8nUapgnP4

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks