xloader | 79ded7b37b299abd26dfa235de5e82b01bd876f82beba27e5963fb66556eceb6

General

Target

79ded7b37b299abd26dfa235de5e82b01bd876f82beba27e5963fb66556eceb6
Size

164KB
Sample

241121-zdbpys1rar
MD5

0ea7342ba7148965d4a582cad0a0458f
SHA1

974843d247a9f7b16bb26d71a876f20e7ddf0c9b
SHA256

79ded7b37b299abd26dfa235de5e82b01bd876f82beba27e5963fb66556eceb6
SHA512

a7d8deeefaa183035674555c8962a84bd834918e24a068991a69a4a03e31defbe76ef2a4f6c6aa8196018dbd3ec9d061eae94a0be251cf9216b1677e55abe880
SSDEEP

3072:Uop+92Bd2y6uXMpb86mBCdxSFYkFjwSXPWW4HiXagO:UFa6IMpAVIdAF1ajf

Score

10^/10

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

qatv

Decoy

van-lijden.com

lovetoolz.com

federalwayapartment.com

shangkaicq.com

palisadesskipatrol.com

czysyyw.com

ouzoudcaro.com

superbrainiacs.com

lemondog.net

cgpme-tchad.com

cqguipu.com

kuysenstore.xyz

k9forza.com

dj2premiumfood.com

goodunclesfriend.com

golf-signal.com

brandmogul.club

izofer.com

abasketofwords.com

tax-kaikei.com

Targets

- Target
  
  79ded7b37b299abd26dfa235de5e82b01bd876f82beba27e5963fb66556eceb6
- Size
  
  164KB
- MD5
  
  0ea7342ba7148965d4a582cad0a0458f
- SHA1
  
  974843d247a9f7b16bb26d71a876f20e7ddf0c9b
- SHA256
  
  79ded7b37b299abd26dfa235de5e82b01bd876f82beba27e5963fb66556eceb6
- SHA512
  
  a7d8deeefaa183035674555c8962a84bd834918e24a068991a69a4a03e31defbe76ef2a4f6c6aa8196018dbd3ec9d061eae94a0be251cf9216b1677e55abe880
- SSDEEP
  
  3072:Uop+92Bd2y6uXMpb86mBCdxSFYkFjwSXPWW4HiXagO:UFa6IMpAVIdAF1ajf
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2