General
-
Target
b38c05f3eb0103d5f2b99139e6fe6562a2cae0be04776ac98dcf9918d932047a
-
Size
172KB
-
MD5
2a42682b0b713a7cb22067a1c71dcdf4
-
SHA1
26709e0f37f9b27bc2a82f58144615f40004a9d3
-
SHA256
b38c05f3eb0103d5f2b99139e6fe6562a2cae0be04776ac98dcf9918d932047a
-
SHA512
7f13f2c602c411d44833448dcd4642831dc5624a014595e24fcc6a2f039f8ff8c447203dd850fe1cd25dd3a6372f4fc1d4b137cf6390cf84a30dae2edf2e806f
-
SSDEEP
3072:P4tbTVo3/QlFvRbBBmWVy1QLUUutSr5XsqpPWwL+VW7mjbk4mYE:PEyPcxB41QfmSr58qUwCVWGbM
Malware Config
Extracted
xloader
2.6
pb0u
pikettrans.com
centralvalasid.com
bfgnft.com
evergreenstandard.com
vibelabs.xyz
ydkj5js.site
estatedigitalservices.com
foretforesthillcondos.com
caturqqbos.art
marbled.enterprises
soicauhay.com
mika-aerophone.xyz
metaverseshopstore.tech
tinycmp.com
ftmfatloss.com
affordablephotobooths.info
courteeshire.com
dostonurinov.com
thomastalkstea.com
make-vr.money
Signatures
-
Xloader family
-
Xloader payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b38c05f3eb0103d5f2b99139e6fe6562a2cae0be04776ac98dcf9918d932047a
Headers
Sections