General
-
Target
zet.dll
-
Size
475KB
-
Sample
201109-99vpd89be6
-
MD5
c83275d7c15af02f0a56eed274b8b67b
-
SHA1
38fbad3e2ce170e7010f86b21af6bd485ad1c6b5
-
SHA256
187e7ad44558b62fdebe79a0ab45f4cdde66f05945d3c7fe848a2212f5fd555d
-
SHA512
8f592dce913f94994e67c16e2ab36349cb6185156dd04b68cd4ce619a752b54131f7285ac78e31a2c6bee1ce433e9f9d42728fbe3c7966a586c8e1cc3834ac6c
Static task
static1
Behavioral task
behavioral1
Sample
zet.dll
Resource
win7v20201028
Malware Config
Extracted
zloader
bot5
bot5
https://militanttra.at/owg.php
Targets
-
-
Target
zet.dll
-
Size
475KB
-
MD5
c83275d7c15af02f0a56eed274b8b67b
-
SHA1
38fbad3e2ce170e7010f86b21af6bd485ad1c6b5
-
SHA256
187e7ad44558b62fdebe79a0ab45f4cdde66f05945d3c7fe848a2212f5fd555d
-
SHA512
8f592dce913f94994e67c16e2ab36349cb6185156dd04b68cd4ce619a752b54131f7285ac78e31a2c6bee1ce433e9f9d42728fbe3c7966a586c8e1cc3834ac6c
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-