Overview

overview

10

Static

static

YTvxeyE.dll

windows7_x64

10

YTvxeyE.dll

windows10_x64

1

Resubmissions

20-10-2020 23:04

201020-kmxvy1gt16 10

20-10-2020 10:21

201020-587p43qzcj 1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    YTvxeyE.dll

  • Size

    570KB

  • Sample

    201020-kmxvy1gt16

  • MD5

    1960ee67cea7e2cdc6f417c9b065e387

  • SHA1

    5afabf09b9ca6686cfa17c54b8e35c45c464f859

  • SHA256

    8895213de00492d3755473bdc57627cdd9d90189b043f2a3dc7ae948d589eb1d

  • SHA512

    5bdf0f881e539ee10c7cf3bf30ed6d21ca7f5a9eec05002cc7107429d6fff92df00bf936f56c970fe4e31bffb26e7fa777219d485f2638c08aff2287e93934b7

Score
10/10
zloaderdivaderpollbotnettrojan

Malware Config

Extracted

Family

zloader

Botnet

divader

Campaign

poll

C2

https://fqnceas.su/gate.php

https://fqlocpeas.ru/gate.php

https://dksaiijn.ru/gate.php

https://dksafjasnf.su/gate.php

https://fjsafasfsa.ru/gate.php

https://fjskoijafsa.ru/gate.php

https://kochamkkkras.ru/gate.php

https://uookqihwdid.ru/gate.php

https://iqowijsdakm.ru/gate.php

https://wiewjdmkfjn.ru/gate.php
rc4.plain
rsa_pubkey.plain

Targets

    • Target

      YTvxeyE.dll

    • Size

      570KB

    • MD5

      1960ee67cea7e2cdc6f417c9b065e387

    • SHA1

      5afabf09b9ca6686cfa17c54b8e35c45c464f859

    • SHA256

      8895213de00492d3755473bdc57627cdd9d90189b043f2a3dc7ae948d589eb1d

    • SHA512

      5bdf0f881e539ee10c7cf3bf30ed6d21ca7f5a9eec05002cc7107429d6fff92df00bf936f56c970fe4e31bffb26e7fa777219d485f2638c08aff2287e93934b7

    Score
    10/10
    trojanbotnetzloader

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

      trojanbotnetzloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks