General

  • Target

    ebook_29.10.20.zip

  • Size

    206KB

  • Sample

    201030-znfyh5amae

  • MD5

    0b2d19a3b4827c0f16cd95652deaac50

  • SHA1

    12bc3eb897bb1753d7e8c7fa6e6c2cc72fd9733d

  • SHA256

    152ece66c16e6254b456279310b0288f72bf5444beb5bbf18ed67c80202cbf97

  • SHA512

    3a115b7d30e9d3020fcb068a8a709e1a9851bfbf0e0d83889cf85e608e2dc67f7d5520c7bb33416a4dcdaefe71509b31c06c1746ec90f7149657bf7b55a66d29

Malware Config

Extracted

Family

zloader

Botnet

r1

Campaign

r1

C2

https://notsweets.net/LKhwojehDgwegSDG/gateJKjdsh.php

https://olpons.com/LKhwojehDgwegSDG/gateJKjdsh.php

https://karamelliar.org/LKhwojehDgwegSDG/gateJKjdsh.php

https://dogrunn.com/LKhwojehDgwegSDG/gateJKjdsh.php

https://azoraz.net/LKhwojehDgwegSDG/gateJKjdsh.php

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      ebook_29.10.20.exe

    • Size

      310KB

    • MD5

      cd1f5e41d727816c6ca5e6c073130df4

    • SHA1

      5d9a72b2b721aa7834d3f3bb07225ce48d4bc3fb

    • SHA256

      a1297a535f5ac9ca22d8c1200098eb01e16860ef3c840457f98000ac6a5087cc

    • SHA512

      4f88ce58d61fa0eb4fc8ad2ce068a3044bcc7f205819cab5c39a998147f034869994c849ee022b487d3708d62167cc766d406e4310d301be1e51b1b1a7f3c588

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

MITRE ATT&CK Matrix

Tasks