General

  • Target

    b9185973575f9ed55b61d145d3e9e5332a28585d9b5da06f278b420c96f6a2e9

  • Size

    164KB

  • Sample

    241121-zb88fa1qgq

  • MD5

    6621707bceb22b7f311bfacc598d2295

  • SHA1

    9953564388c3b04c3055d3fce1c71c8ec9a8a562

  • SHA256

    b9185973575f9ed55b61d145d3e9e5332a28585d9b5da06f278b420c96f6a2e9

  • SHA512

    eca4ad2bcc4a419023db2f96c6144bf3b3050d7121e8dd613b24d7d48bc50a8845c224f1b68ec10d0e667e1677108a11c5b9d0edde2849b77632fc098f5b8abf

  • SSDEEP

    3072:2zJVSmjh4S92EBxqMSggBIg3dUyZsC3+R6uSjFAgKa1:2jSuPEMSbKg3dUy6xCK

Malware Config

Extracted

Family

xloader

Version

2.4

Campaign

cxeo

Decoy

realtyfindr.com

littlelakesranchcattle.com

mortgagecollective.online

cortenlogistic.com

healthcaresupplyinc.com

abc1229.com

johnlambertsen.online

yasirweb.tech

1398toftsdr.com

chordsofdevils.com

hemetcondos4sale.com

hdtvstoreonline.com

ultimasnoticiaswfmajide2.xyz

soutu6.com

lastmilefast.com

glveye.icu

countinesices.com

savenroar.com

reiwa.cloud

wendsoue.com

Targets

    • Target

      b9185973575f9ed55b61d145d3e9e5332a28585d9b5da06f278b420c96f6a2e9

    • Size

      164KB

    • MD5

      6621707bceb22b7f311bfacc598d2295

    • SHA1

      9953564388c3b04c3055d3fce1c71c8ec9a8a562

    • SHA256

      b9185973575f9ed55b61d145d3e9e5332a28585d9b5da06f278b420c96f6a2e9

    • SHA512

      eca4ad2bcc4a419023db2f96c6144bf3b3050d7121e8dd613b24d7d48bc50a8845c224f1b68ec10d0e667e1677108a11c5b9d0edde2849b77632fc098f5b8abf

    • SSDEEP

      3072:2zJVSmjh4S92EBxqMSggBIg3dUyZsC3+R6uSjFAgKa1:2jSuPEMSbKg3dUy6xCK

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks