xloader | 28042692f65fdf0d71957be60fa390ff0b0e2086c3b7f0fc0f7c4f9f83815798

General

Target

28042692f65fdf0d71957be60fa390ff0b0e2086c3b7f0fc0f7c4f9f83815798
Size

164KB
Sample

241121-zhz84ssjdm
MD5

a4ba63235098607413a0afab4df38535
SHA1

25c18941ada5b570f53c0c5537c269ec46408ebf
SHA256

28042692f65fdf0d71957be60fa390ff0b0e2086c3b7f0fc0f7c4f9f83815798
SHA512

33284d81f3ca7baae318cf36455693693f283b570c35a5538fcbe040ccb43df88590a2f49a954a07134342cd0ec717e1c89f03386f414234c33bd31314439277
SSDEEP

3072:SJJUgt9vj8yY+k47GhiFMgW9C3rIENf4ncVOxwWLSouY1/pO:S4asTWMggk0ENf44Oxb7/

Score

10^/10

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

k3rh

Decoy

sfbuni.com

slimeskate.tech

enriquem.com

erahuge.com

dao.diamonds

quickfinder.pro

hosh.club

reeronsales.com

iphone13pro.tech

perdadepesobranet.com

kokoro-hane.com

allthingsserverless.com

treesliving.com

pact.eco

shanbin.biz

chloeanneweston.com

xqhjh.com

casfrenchitalliancars.com

brejay.biz

dicecamp.com

Targets

- Target
  
  28042692f65fdf0d71957be60fa390ff0b0e2086c3b7f0fc0f7c4f9f83815798
- Size
  
  164KB
- MD5
  
  a4ba63235098607413a0afab4df38535
- SHA1
  
  25c18941ada5b570f53c0c5537c269ec46408ebf
- SHA256
  
  28042692f65fdf0d71957be60fa390ff0b0e2086c3b7f0fc0f7c4f9f83815798
- SHA512
  
  33284d81f3ca7baae318cf36455693693f283b570c35a5538fcbe040ccb43df88590a2f49a954a07134342cd0ec717e1c89f03386f414234c33bd31314439277
- SSDEEP
  
  3072:SJJUgt9vj8yY+k47GhiFMgW9C3rIENf4ncVOxwWLSouY1/pO:S4asTWMggk0ENf44Oxb7/
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2