General

  • Target

    ccf835fbf85c0d1f433e70bb96d1c87504a228b6ca3b973e240e35073d9d86a7.bin

  • Size

    152KB

  • Sample

    201110-2yb6vf3zsj

  • MD5

    91a56986866c5991969d52932c655d8b

  • SHA1

    dbe55a78b9fae7fe6441490a9e98a8b99bac68ee

  • SHA256

    ccf835fbf85c0d1f433e70bb96d1c87504a228b6ca3b973e240e35073d9d86a7

  • SHA512

    c5843d3f5e329a92dfeb4f53c8240ce443927e54670762fff22a2b428debbe47316a7da33b3b37b837aba14b881c2fbc718dab7536323308817d315953a94044

Malware Config

Extracted

Family

zloader

Botnet

googleaktualizacija

Campaign

googleaktualizacija1

C2

https://iqowijsdakm.ru/gate.php

https://wiewjdmkfjn.ru/gate.php

https://dksaoidiakjd.su/gate.php

https://iweuiqjdakjd.su/gate.php

https://yuidskadjna.su/gate.php

https://olksmadnbdj.su/gate.php

https://odsakmdfnbs.com/gate.php

https://odsakjmdnhsaj.com/gate.php

https://odjdnhsaj.com/gate.php

https://odoishsaj.com/gate.php

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      ccf835fbf85c0d1f433e70bb96d1c87504a228b6ca3b973e240e35073d9d86a7.bin

    • Size

      152KB

    • MD5

      91a56986866c5991969d52932c655d8b

    • SHA1

      dbe55a78b9fae7fe6441490a9e98a8b99bac68ee

    • SHA256

      ccf835fbf85c0d1f433e70bb96d1c87504a228b6ca3b973e240e35073d9d86a7

    • SHA512

      c5843d3f5e329a92dfeb4f53c8240ce443927e54670762fff22a2b428debbe47316a7da33b3b37b837aba14b881c2fbc718dab7536323308817d315953a94044

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

MITRE ATT&CK Matrix

Tasks