General

  • Target

    9bc70865e2a1b31ebfc6849dedf8b4291f12c07f8be5a3ee5320e2805b2b23fd

  • Size

    164KB

  • Sample

    241121-zb4mysxlby

  • MD5

    8bf1f9885feb5f3bae3b0e260d6e2a5d

  • SHA1

    62b7d06d10b769029ddd118e18b7c93ffa9350b6

  • SHA256

    9bc70865e2a1b31ebfc6849dedf8b4291f12c07f8be5a3ee5320e2805b2b23fd

  • SHA512

    87bc3120faa9535df3a88655c8f4913225028f91e2c1839fe39a1ca7800d88df281c81816f1ce21b3d4305bb6d4508a0e4ab179ba498a97c14d9239504705388

  • SSDEEP

    3072:gOpXEf2N0rcg4M7MOpsuF3WX9z8TtqXz+FoLW3qdCH6bL8DwR:gqCoxGMOOay9z8TtqjvLth34wR

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

gnui

Decoy

hotelafvalleorotava.com

blackfuid.com

emphatictrifles.com

loafladies.com

globaltrainerontroz.com

my-access.cloud

hakkasgirl.com

martrenovations.com

wirlessjuicers.com

chimmidigitalllc.com

cryptoscopy.direct

364721.com

dejuke.net

fertigbaufirmen.com

theaccuratecare.com

shigeds.com

gyors-soforszolgalat.com

movement4mamas.com

fox024.com

drivenmobility.club

Targets

    • Target

      9bc70865e2a1b31ebfc6849dedf8b4291f12c07f8be5a3ee5320e2805b2b23fd

    • Size

      164KB

    • MD5

      8bf1f9885feb5f3bae3b0e260d6e2a5d

    • SHA1

      62b7d06d10b769029ddd118e18b7c93ffa9350b6

    • SHA256

      9bc70865e2a1b31ebfc6849dedf8b4291f12c07f8be5a3ee5320e2805b2b23fd

    • SHA512

      87bc3120faa9535df3a88655c8f4913225028f91e2c1839fe39a1ca7800d88df281c81816f1ce21b3d4305bb6d4508a0e4ab179ba498a97c14d9239504705388

    • SSDEEP

      3072:gOpXEf2N0rcg4M7MOpsuF3WX9z8TtqXz+FoLW3qdCH6bL8DwR:gqCoxGMOOay9z8TtqjvLth34wR

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks