General
-
Target
JaffaCakes118_3d87611f84512f886ae3ff011912530a6f0cef747ae0a2f14d1c703da6244357
-
Size
168KB
-
MD5
086df4da121e0a6928e4a762c7b96cfa
-
SHA1
53943c5d3c4107f27bafde154e997f989e2549e9
-
SHA256
3d87611f84512f886ae3ff011912530a6f0cef747ae0a2f14d1c703da6244357
-
SHA512
ef1d60a0b66618a70471bc624d76125648e4769401e121e6103c2f25e46b2bdd8fcbcdf6b8ce21bf2964a0b971a5ccdf836bc1f92326e87fa4a3254fbff20591
-
SSDEEP
3072:FAxpd12O6ZklHlMa5IXS8dwcG6TQW7axxcddVZSZDEMWA:FApYOFMa6i8dwz6T/7uxC/cZDM
Malware Config
Extracted
xloader
2.5
dgrg
iot-vn.com
gamiteisnowjoyned.com
ak8flfqzm8.com
daliborkokic.com
mrk-9.com
tanzibkarate.quest
mburmtdvccti.mobi
thomas-wildlife-control.com
thebritenseries.com
hkkbags.com
redenyl.com
resilientbutterfly.com
nicethelab.com
xn--1lq90isray30ltdc.xn--czru2d
cyberews.net
naclepin2a.xyz
rodrigocoppa.com
hightings.com
chamaaibrasil.com
bdelsaer.com
Signatures
-
Xloader family
-
Xloader payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_3d87611f84512f886ae3ff011912530a6f0cef747ae0a2f14d1c703da6244357
Headers
Sections