zloader | ca6b21a84c2afa90faf0d82248d08f627048602d103aa50c0d547fd0c96d3a98 | Triage

Sharing

General

Target

4193a2a9508a343c7be37782d7d1aeba.dll
Size

667KB
Sample

201108-tk9jmjjfdj
MD5

4193a2a9508a343c7be37782d7d1aeba
SHA1

ecb3f1ba9256baa17c5551749182d41cbd3f53be
SHA256

ca6b21a84c2afa90faf0d82248d08f627048602d103aa50c0d547fd0c96d3a98
SHA512

2b8831292ac67ccf89fcffada75fe9b626c768910ce9bee77ce29b6092cec5cb740e1331294e7562ca35b77239872b905feefd2776b46a9a4e76c5e0285d6eaf

Score

10^/10

zloader dll26 dll26 botnet trojan

Malware Config

Extracted

Family

zloader

Botnet

dll26

Campaign

dll26

C2

https://eecakesconf.at/web982/gate.php

rc4.plain

rsa_pubkey.plain

Targets

- Target
  
  4193a2a9508a343c7be37782d7d1aeba.dll
- Size
  
  667KB
- MD5
  
  4193a2a9508a343c7be37782d7d1aeba
- SHA1
  
  ecb3f1ba9256baa17c5551749182d41cbd3f53be
- SHA256
  
  ca6b21a84c2afa90faf0d82248d08f627048602d103aa50c0d547fd0c96d3a98
- SHA512
  
  2b8831292ac67ccf89fcffada75fe9b626c768910ce9bee77ce29b6092cec5cb740e1331294e7562ca35b77239872b905feefd2776b46a9a4e76c5e0285d6eaf
Score

10^/10

zloader dll26 dll26 botnet trojan
- Zloader, Terdot, DELoader, ZeusSphinx
  Zloader is a malware strain that was initially discovered back in August 2015.
  trojan botnet zloader
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

zloaderdll26dll26botnettrojan

behavioral2