General

  • Target

    7a35d81807dd08392b0a16291ce95862535790ac83c4311e8b2d1aaea5485f88

  • Size

    164KB

  • Sample

    241121-zexc2sxmbt

  • MD5

    94bc0a431e0282a84e9531450cabe6f5

  • SHA1

    c0d031c8c16a86e1036c7b3b809c97f6bceb496f

  • SHA256

    7a35d81807dd08392b0a16291ce95862535790ac83c4311e8b2d1aaea5485f88

  • SHA512

    1ba7347b9353c278c401f2d93d93c4836a33f2783d538bdfbac05c4e0368190b6272a93fcd895dc1d9c984d7dc9c64af3f971dd1d3c7dd4a3d298b4861432815

  • SSDEEP

    3072:ziPp4MTR2YutOiOzMNzVnYANAPv49GHqjgU8ssh+PNg:ziWqGzQMNxYANAPvPHqpshb

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

p9iu

Decoy

bestofkualalumpur.info

whitewrapper.com

mtb-0uth4x4.solutions

808gang.net

becklily.top

bet365star.online

taxincompany.com

sjcreativevisions.com

kamerynemehiel.com

fugg-apparel.com

alabamanil.com

nursereedrn.com

purpleribbonentertainment.com

1164berrycreekdr.com

cityoffelton.com

livewithcovid-19.com

rawentertainments.com

ringersofty.info

merzaesthetics-ir.com

rhreformas.com

Targets

    • Target

      7a35d81807dd08392b0a16291ce95862535790ac83c4311e8b2d1aaea5485f88

    • Size

      164KB

    • MD5

      94bc0a431e0282a84e9531450cabe6f5

    • SHA1

      c0d031c8c16a86e1036c7b3b809c97f6bceb496f

    • SHA256

      7a35d81807dd08392b0a16291ce95862535790ac83c4311e8b2d1aaea5485f88

    • SHA512

      1ba7347b9353c278c401f2d93d93c4836a33f2783d538bdfbac05c4e0368190b6272a93fcd895dc1d9c984d7dc9c64af3f971dd1d3c7dd4a3d298b4861432815

    • SSDEEP

      3072:ziPp4MTR2YutOiOzMNzVnYANAPv49GHqjgU8ssh+PNg:ziWqGzQMNxYANAPvPHqpshb

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks