General

  • Target

    c35ad89c38ab342957c70b9e9caffcd5b269d67bf1702d1c4ef2ec25e786e30c.exe

  • Size

    168KB

  • Sample

    241127-v8h1aszkfj

  • MD5

    a769ff74296be65be9b28be82bd272b1

  • SHA1

    2669174c6ed9550432d4e00ae9d9fcbc375b5fa6

  • SHA256

    c35ad89c38ab342957c70b9e9caffcd5b269d67bf1702d1c4ef2ec25e786e30c

  • SHA512

    00ad38d72f7c55dd71e88af078adbfd6998d30d69208febd9cdc1ad73a7aa4aca7f2bf42f9d13821d373fa36ef7a36e1b7c86c54f939cb347d4eb5d746712b65

  • SSDEEP

    3072:6BLJnliVjQ/YNveBcHXMSGNYmiitk3jxmMfyn5i6tqrFG:wZu53MSYHntk3jx7+qk

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

nazb

Decoy

polypixelarmy.com

dppu56.com

prayrowan.com

favoredysxdmg.xyz

swichkickoff.com

suddennnnnnnnnnnn06.xyz

your-own-vpn.com

ban-click.com

digiblogofficial.com

frugaimoms.quest

longoriaamanda.com

moonelegant.com

americanpawnaz.com

riverflowmassage.com

theresnosomedayinbadass.com

sacredsolomon.com

mkperfumy.com

yavastudasuda.net

votewhosright.com

lovetoconnect.net

Targets

    • Target

      c35ad89c38ab342957c70b9e9caffcd5b269d67bf1702d1c4ef2ec25e786e30c.exe

    • Size

      168KB

    • MD5

      a769ff74296be65be9b28be82bd272b1

    • SHA1

      2669174c6ed9550432d4e00ae9d9fcbc375b5fa6

    • SHA256

      c35ad89c38ab342957c70b9e9caffcd5b269d67bf1702d1c4ef2ec25e786e30c

    • SHA512

      00ad38d72f7c55dd71e88af078adbfd6998d30d69208febd9cdc1ad73a7aa4aca7f2bf42f9d13821d373fa36ef7a36e1b7c86c54f939cb347d4eb5d746712b65

    • SSDEEP

      3072:6BLJnliVjQ/YNveBcHXMSGNYmiitk3jxmMfyn5i6tqrFG:wZu53MSYHntk3jx7+qk

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks