Overview

overview

10

Static

static

3648fe0019...cf.dll

windows7_x64

10

3648fe0019...cf.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3648fe001994cb9c0a6b510213c268a6bd4761a3a99f3abb2738bf84f06d11cf.zip

  • Size

    357KB

  • Sample

    201031-h5ammgaqja

  • MD5

    c6d003c53a692269bad9058b1f99dbe7

  • SHA1

    9234ac4c06f530af1b459499a4e365aa269a4d24

  • SHA256

    81bbc91db8cb33498d759a3da10b37437a41ee98e8ac215e1d155c215d940fc2

  • SHA512

    3f33dc7a81c63713efc56620a9642a707357fb6c33e45b5749007a80c2e74b3121be92160a7ebff249d14fc3dfdfa9b7f539081b653e7d21549a4402404c77e6

Score
10/10
zloadermiguel20/04botnettrojan

Malware Config

Extracted

Family

zloader

Botnet

miguel

Campaign

20/04

C2

https://dcaiqjgnbt.icu/wp-config.php

https://nmttxggtb.press/wp-config.php
rc4.plain

Targets

    • Target

      3648fe001994cb9c0a6b510213c268a6bd4761a3a99f3abb2738bf84f06d11cf.dll

    • Size

      512KB

    • MD5

      fa9b3dfdb4b97dfe0db5991472f89399

    • SHA1

      5677f26e926c8c8d7f7bf7eb085a9e48549a268b

    • SHA256

      3648fe001994cb9c0a6b510213c268a6bd4761a3a99f3abb2738bf84f06d11cf

    • SHA512

      e5ac96e3ef6ee9fa110b433c1c49a7f16f4ba6694ec76e10d31848ecd4f284b6845508979758a16121a63d6c4a1af2103268d6e03fbb1c6672005090d560cc74

    Score
    10/10
    zloadermiguel20/04botnettrojan

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

      trojanbotnetzloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks