Overview

overview

10

Static

static

10

e6f50557b5...8b.exe

windows7-x64

1

e6f50557b5...8b.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e6f50557b540e1a057c0ee044b0ab3ca70b04fe8f483c0ee4481c63f7321418b

  • Size

    164KB

  • Sample

    241121-zlg7psskap

  • MD5

    7f74f441130d4731c0385ca40e07d4de

  • SHA1

    dd832883b0ec5bc5a7cf5c565a742f758e017ac1

  • SHA256

    e6f50557b540e1a057c0ee044b0ab3ca70b04fe8f483c0ee4481c63f7321418b

  • SHA512

    a24f10eef0093dfb6b461ec2e0ee23184acb6e4af8dcbfc8e75530473def25424110753876319bc3c13277e3f70e1c8186e0e8fa3970560a2b12e31b4a2c48e7

  • SSDEEP

    3072:AxpVnrP24FHk5uRWruMdOIJ+cd2zJBxXxhAUKY6VGAs40NuGB:AZn7rsCMdBccd2z/BIUZtz4+

Score
10/10
xloadernb8adiscoveryrat

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

nb8a

Decoy

iqcleaner.com

mediklook.store

meganandbobbyprine.com

ktnword.xyz

kbkd.store

ehpad-leslavandines.com

heinousas.com

chefmichaelklein.com

expatriatecafe.com

achgare.com

lighter-than-light.com

liwei.cloud

gomesmodeling.com

goodteesco.com

valseriananetwork.club

riyiflower.com

fluorcommunicators.com

missouriestate.com

perkeyklp.space

saltanatroleplay.com

Targets

    • Target

      e6f50557b540e1a057c0ee044b0ab3ca70b04fe8f483c0ee4481c63f7321418b

    • Size

      164KB

    • MD5

      7f74f441130d4731c0385ca40e07d4de

    • SHA1

      dd832883b0ec5bc5a7cf5c565a742f758e017ac1

    • SHA256

      e6f50557b540e1a057c0ee044b0ab3ca70b04fe8f483c0ee4481c63f7321418b

    • SHA512

      a24f10eef0093dfb6b461ec2e0ee23184acb6e4af8dcbfc8e75530473def25424110753876319bc3c13277e3f70e1c8186e0e8fa3970560a2b12e31b4a2c48e7

    • SSDEEP

      3072:AxpVnrP24FHk5uRWruMdOIJ+cd2zJBxXxhAUKY6VGAs40NuGB:AZn7rsCMdBccd2z/BIUZtz4+

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks