General
-
Target
w.dll
-
Size
492KB
-
Sample
201109-xjvey5b83j
-
MD5
892fbc87fdbcbe9d91e17ae7355eb54c
-
SHA1
c0e25d2f02a768def644be6c248732da4f91495b
-
SHA256
67b46301815d5ba32f90af114a459810902ba6d97a75821c8455b8103073b499
-
SHA512
09c30eef3c57be57ef396ff1c2de92f0cff1b57bea0e56ab6401b844b4c5982c7a56f3ef708d0aff2bb6ea1baaef5cf39098b6623bc529c579b35ad73ea4039a
Static task
static1
Behavioral task
behavioral1
Sample
w.dll
Resource
win7v20201028
Malware Config
Extracted
zloader
miguel
05/06
https://gahotimaskever.ga/wp-parser.php
https://tlenexicagopca.tk/wp-parser.php
http://cld.kazgau.com/wp-parser.php
https://cmso.med.cmu.ac.th/wp-parser.php
http://janekleeb.com/wp-parser.php
Targets
-
-
Target
w.dll
-
Size
492KB
-
MD5
892fbc87fdbcbe9d91e17ae7355eb54c
-
SHA1
c0e25d2f02a768def644be6c248732da4f91495b
-
SHA256
67b46301815d5ba32f90af114a459810902ba6d97a75821c8455b8103073b499
-
SHA512
09c30eef3c57be57ef396ff1c2de92f0cff1b57bea0e56ab6401b844b4c5982c7a56f3ef708d0aff2bb6ea1baaef5cf39098b6623bc529c579b35ad73ea4039a
-
Blacklisted process makes network request
-
Suspicious use of SetThreadContext
-