Overview

overview

10

Static

static

10

d6d3193995...6a.exe

windows7-x64

1

d6d3193995...6a.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d6d3193995ce65a9f2d7cc8dd5c752f4a288b889ddebf169ee60abf4c96c886a

  • Size

    232KB

  • Sample

    241121-zhy12sxmf1

  • MD5

    423d58aa5a05744a06a8710d5c9f82f3

  • SHA1

    a3024fbdb100af58923267a76cc782d93641139e

  • SHA256

    d6d3193995ce65a9f2d7cc8dd5c752f4a288b889ddebf169ee60abf4c96c886a

  • SHA512

    08522926afd701daf06221dd8291aabfbcb67f3b987101f794b0497466ccff571c12eb0763215f73b6af76b2635be933ea4381b6887fe55533cba3eb35b8ce2b

  • SSDEEP

    3072:9xJpHjrvms4YAoSqFwM5NMm2tmPv9kZDoItHnpzk2KQY5bCZKCo:9dDFhCM5yNW9kZkItHnpzkfrR

Score
10/10
xloaderarh2discoveryrat

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

arh2

Decoy

anniversaryalert.com

kinship.space

buabdullagroup.com

ghostprotectionagency.com

scion-go-getter.com

skindeepapp.com

kysp3.xyz

bonitaspringshomesearch.com

bestdeals2022.online

themarketingstinger.com

chengkayouxuan.com

fendoremi.com

j-stra.com

klingelecn.net

deluxecarepro.com

huanbaodg.com

mes-dents-blanches.com

solutionsemissionsimplifiee.com

abedbashir.tech

good-collection.store

Targets

    • Target

      d6d3193995ce65a9f2d7cc8dd5c752f4a288b889ddebf169ee60abf4c96c886a

    • Size

      232KB

    • MD5

      423d58aa5a05744a06a8710d5c9f82f3

    • SHA1

      a3024fbdb100af58923267a76cc782d93641139e

    • SHA256

      d6d3193995ce65a9f2d7cc8dd5c752f4a288b889ddebf169ee60abf4c96c886a

    • SHA512

      08522926afd701daf06221dd8291aabfbcb67f3b987101f794b0497466ccff571c12eb0763215f73b6af76b2635be933ea4381b6887fe55533cba3eb35b8ce2b

    • SSDEEP

      3072:9xJpHjrvms4YAoSqFwM5NMm2tmPv9kZDoItHnpzk2KQY5bCZKCo:9dDFhCM5yNW9kZkItHnpzkfrR

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks