Overview

overview

1

Static

static

zloader_1....ir.exe

windows7_x64

1

zloader_1....ir.exe

windows10_x64

1

Analysis

  • max time kernel
    143s
  • max time network
    146s
  • platform
    windows10_x64
  • resource
    win10
  • submitted
    19-07-2020 19:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    zloader_1.18.2.0.vir.exe

  • Size

    201KB

  • MD5

    ab6189d429aec696bdc78a097f1ed674

  • SHA1

    7ff185f36129b11c4710979ef8797d713986d571

  • SHA256

    0992e4668212efdaf0f5bd92983ff0b50f4024bd6f5fe5e4e77c2816e62e8504

  • SHA512

    4a7ec27dff963f9c56e44f46272893f2f1a9149519c1430bc9f42139b2c2ab462bafeb60dbf20e09f971a688b7faf8dd8c7434b659c3cbf332d95c2fd6bc5805

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs
  • Suspicious behavior: MapViewOfSection 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 12 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\zloader_1.18.2.0.vir.exe
    "C:\Users\Admin\AppData\Local\Temp\zloader_1.18.2.0.vir.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    • Suspicious behavior: MapViewOfSection
    PID:3920
    • C:\Windows\SysWOW64\explorer.exe
      explorer.exe
      2⤵
      • Suspicious behavior: EnumeratesProcesses
      PID:3908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3908-0-0x0000000000000000-mapping.dmp
    Download
  • memory/3908-1-0x0000000000CD0000-0x000000000110F000-memory.dmp
    Filesize

    4.2MB

    Download
  • memory/3908-2-0x0000000000CD0000-0x000000000110F000-memory.dmp
    Filesize

    4.2MB

    Download