xloader | 5f01f7635f0f2e619a3b37ca037b191590d50a6064f40fec2ed0acc14cb914c6

General

Target

5f01f7635f0f2e619a3b37ca037b191590d50a6064f40fec2ed0acc14cb914c6
Size

164KB
Sample

241121-z4dx1asmcl
MD5

da47ba6c4269bc45e1927a5e9ce2e97d
SHA1

e7e6614cde7dc279f7f480ae66c2caeaf4bbbd38
SHA256

5f01f7635f0f2e619a3b37ca037b191590d50a6064f40fec2ed0acc14cb914c6
SHA512

e9a9a3f04b2022a4689df5ed6213dfe1cfc40d50dbbdc0661117536184599a46f0f45bd0da66c639de8257c778898dbd9437fe3828ff92f02c8f126dfe8e5c8e
SSDEEP

3072:acJT2jyoWXCQqH4MIf6CByU69vDZcD3RYDaksIA37:a814YMIiqyR9vDZihYuks7

Score

10^/10

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

ocgr

Decoy

shiftmedicalstaffing.agency

muktobangla.xyz

attmleather.com

modelahs.com

clime.email

yonatec.com

mftie.com

doxofcolor.com

american-atlantic.net

christineenergy.com

fjqsdz.com

nagpurmandarin.com

hofwimmer.com

gororidev.com

china-eros.com

xn--ekrt15fxyb2t2c.xn--czru2d

dabsavy.com

buggy4t.com

souplant.com

insurancewineappraisals.com

Targets

- Target
  
  5f01f7635f0f2e619a3b37ca037b191590d50a6064f40fec2ed0acc14cb914c6
- Size
  
  164KB
- MD5
  
  da47ba6c4269bc45e1927a5e9ce2e97d
- SHA1
  
  e7e6614cde7dc279f7f480ae66c2caeaf4bbbd38
- SHA256
  
  5f01f7635f0f2e619a3b37ca037b191590d50a6064f40fec2ed0acc14cb914c6
- SHA512
  
  e9a9a3f04b2022a4689df5ed6213dfe1cfc40d50dbbdc0661117536184599a46f0f45bd0da66c639de8257c778898dbd9437fe3828ff92f02c8f126dfe8e5c8e
- SSDEEP
  
  3072:acJT2jyoWXCQqH4MIf6CByU69vDZcD3RYDaksIA37:a814YMIiqyR9vDZihYuks7
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2