General
-
Target
zte(1).dll
-
Size
473KB
-
Sample
201109-4wpwk1zk1e
-
MD5
2b99305fdd451f60f935efb4fd4fb9be
-
SHA1
d0c7f705d3d94ccea33654f940c7b2e77448fc3d
-
SHA256
8761a16b210e215456f4ad4dffeb624ee2b2b3646971860dc5ffb0f8b82658b0
-
SHA512
7fb8307f9a669fd1ba37a41d4f611d61124370b514fa290fd0d9ad1dcba8f2c0a37e3999ee507944f03d66ac3907ba56bf3fbaaef5409e5ae5e7746f6d7bca0f
Static task
static1
Behavioral task
behavioral1
Sample
zte(1).dll
Resource
win7v20201028
Malware Config
Extracted
zloader
bot5
bot5
https://militanttra.at/owg.php
Targets
-
-
Target
zte(1).dll
-
Size
473KB
-
MD5
2b99305fdd451f60f935efb4fd4fb9be
-
SHA1
d0c7f705d3d94ccea33654f940c7b2e77448fc3d
-
SHA256
8761a16b210e215456f4ad4dffeb624ee2b2b3646971860dc5ffb0f8b82658b0
-
SHA512
7fb8307f9a669fd1ba37a41d4f611d61124370b514fa290fd0d9ad1dcba8f2c0a37e3999ee507944f03d66ac3907ba56bf3fbaaef5409e5ae5e7746f6d7bca0f
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-