General

  • Target

    13df52643a87c289ee7a052952412b0b1f0f978289a44d564be1d5b2a87827c9

  • Size

    164KB

  • Sample

    241121-zelasaxmav

  • MD5

    3dc4ad3431a254f3ca1c3c8504fae12a

  • SHA1

    2c04efd91e87c007d1746b991a841ff4233f2ecb

  • SHA256

    13df52643a87c289ee7a052952412b0b1f0f978289a44d564be1d5b2a87827c9

  • SHA512

    8019316a521215611c361593dce5b05be649c27f3eaf8becf6eac2177c0c49ebaffd690ac91dacf3a45b2a09586d5af27ca3f5641972a127930ee3b8ce22535c

  • SSDEEP

    3072:e4pp6a2OQFXxYgGlMkzxxAvfdsphNN3AAGoa4iVjCnOYdWz:eCa3OMkNSHdsphNN3IoatVjPYY

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

nig8

Decoy

jmanstore.com

babakrashid.club

hong88888yuanxiang.com

bets-bc-cfeae.xyz

chiragkhemka.com

aignerlabelholde.com

givemelucky.com

mobilethaimassageatl.com

bosskardus.com

postmanmajor.com

lifelineministrieschurch.com

compressathlon.com

dechemuckho.com

vogbuilders.com

azumo.xyz

miskarangsimpang.xyz

birdcagewire.com

cowcatartstudio.com

theinteriorsfurniture.com

lakeforestparkinvestments.com

Targets

    • Target

      13df52643a87c289ee7a052952412b0b1f0f978289a44d564be1d5b2a87827c9

    • Size

      164KB

    • MD5

      3dc4ad3431a254f3ca1c3c8504fae12a

    • SHA1

      2c04efd91e87c007d1746b991a841ff4233f2ecb

    • SHA256

      13df52643a87c289ee7a052952412b0b1f0f978289a44d564be1d5b2a87827c9

    • SHA512

      8019316a521215611c361593dce5b05be649c27f3eaf8becf6eac2177c0c49ebaffd690ac91dacf3a45b2a09586d5af27ca3f5641972a127930ee3b8ce22535c

    • SSDEEP

      3072:e4pp6a2OQFXxYgGlMkzxxAvfdsphNN3AAGoa4iVjCnOYdWz:eCa3OMkNSHdsphNN3IoatVjPYY

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks