General

  • Target

    67769db58b6908d3ea1fc62bbb7d21a719b685e65c9389880cc50c6ab8538959

  • Size

    164KB

  • MD5

    dcbc40fda4de683d40f2165d4205dc33

  • SHA1

    7bc14aeaf1f94ef652fd46228edb6d0f20645911

  • SHA256

    67769db58b6908d3ea1fc62bbb7d21a719b685e65c9389880cc50c6ab8538959

  • SHA512

    7827094cbc7cc3bb0e1a3292f68e2642801503cc38318d54b8e32c4a603f01be166ee408a15fd82073845bab9eb8370f605ef4b9bc2eeb4972caee0ee9115fbd

  • SSDEEP

    3072:NmpWZ2gahUHc1JMvIfYlM1tR59lIg2/RYQGIH:N3ORrMvwQM1tR59l2qM

Score
10/10

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

me3z

Decoy

pawz-store.xyz

leo.watch

momshouseillinois.com

hhintech.cloud

arcus.tax

gilleydesigns.com

retonamoss.com

redirectingpagos.net

hammifashion.com

qvisit.today

bastnbt.com

suex2global.com

untermsviava.quest

yfua.top

officialwww.com

calf-tv.online

convercisitsolutions.com

yyds123.club

birdsontree.biz

nitinmane.com

Signatures

  • Xloader family
  • Xloader payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 67769db58b6908d3ea1fc62bbb7d21a719b685e65c9389880cc50c6ab8538959
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections