xloader

General

Target

JaffaCakes118_f12bf73a1cb81b5ddd8dd6ed66e610f1
Size

461KB
Sample

250110-3jfsmssrbt
MD5

f12bf73a1cb81b5ddd8dd6ed66e610f1
SHA1

cb8b0497c95512bf9233823f7d20937424c87207
SHA256

6446736e3662120e1fe4c3518bc8e6d14553f6b0b27aaf1fc5676e1f73a50c33
SHA512

385c4de5deca014f7486f802efc9a305e2bd2c457a21b63f66bf6f3caef1acee6537f32c7cd4690ee0378939dfad4444abb832c31fb5b5cfcb5bf7ae86715bad
SSDEEP

6144:UfHlm0I6Uqd2GhNoWnti/tanHwGslCmeMPSeKsyLGjloc5GWBqeq8Q2:UfFZUi2iN9NH3wR6Ajld5G0qf8

Score

10^/10

Malware Config

Extracted

Family

xloader

Version

2.5

Campaign

euzn

Decoy

235296tyc.com

gold12guide.art

baibuaherb.com

weberwines.tax

chezvitoria.com

aidenb.tech

pitchdeckservice.com

surgeryforfdf.xyz

workunvaccinated.com

hrtaro.com

yourotcs.com

sonimultispecialityclinic.com

consultantadvisors.com

pentesting-consulting.com

dantechs.digital

longshifa.online

taweilai.net

imyusuke.com

cashndashfinancial.com

fasiglimt.quest

Targets

- Target
  
  JaffaCakes118_f12bf73a1cb81b5ddd8dd6ed66e610f1
- Size
  
  461KB
- MD5
  
  f12bf73a1cb81b5ddd8dd6ed66e610f1
- SHA1
  
  cb8b0497c95512bf9233823f7d20937424c87207
- SHA256
  
  6446736e3662120e1fe4c3518bc8e6d14553f6b0b27aaf1fc5676e1f73a50c33
- SHA512
  
  385c4de5deca014f7486f802efc9a305e2bd2c457a21b63f66bf6f3caef1acee6537f32c7cd4690ee0378939dfad4444abb832c31fb5b5cfcb5bf7ae86715bad
- SSDEEP
  
  6144:UfHlm0I6Uqd2GhNoWnti/tanHwGslCmeMPSeKsyLGjloc5GWBqeq8Q2:UfFZUi2iN9NH3wR6Ajld5G0qf8
Score

10^/10

xloader euzn discovery loader rat
- Xloader
  Xloader is a rebranded version of Formbook malware.
  loader xloader
- Xloader family
  xloader
- Xloader payload
  rat
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Xloader family

Xloader payload

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2