Overview

overview

10

Static

static

10

f1987289f7...fc.dll

windows7_x64

10

f1987289f7...fc.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f1987289f7a42f8ef652f6f6504991dbf0cd00a92653c544f67f1f25d4361ffc

  • Size

    187KB

  • Sample

    201110-7bxbgcz4r6

  • MD5

    561d814286baee1b2e815c06e39d6e4e

  • SHA1

    12defd78c0cd18d77a5ee085684e6e3c26ed42e9

  • SHA256

    f1987289f7a42f8ef652f6f6504991dbf0cd00a92653c544f67f1f25d4361ffc

  • SHA512

    01aa8a343625339321e55b5264a1f7f5c15309eccaaf78964e4e6a37c70416c35f64e874afbbaa5e8481c6687cee7fde3382404a24d920711707b8a5359e420b

Score
10/10
zloader09/04botnettrojan

Malware Config

Extracted

Family

zloader

Botnet

09/04

C2

https://eoieowo.casa/wp-config.php

https://dcgljuzrb.pw/wp-config.php
rc4.plain

Targets

    • Target

      f1987289f7a42f8ef652f6f6504991dbf0cd00a92653c544f67f1f25d4361ffc

    • Size

      187KB

    • MD5

      561d814286baee1b2e815c06e39d6e4e

    • SHA1

      12defd78c0cd18d77a5ee085684e6e3c26ed42e9

    • SHA256

      f1987289f7a42f8ef652f6f6504991dbf0cd00a92653c544f67f1f25d4361ffc

    • SHA512

      01aa8a343625339321e55b5264a1f7f5c15309eccaaf78964e4e6a37c70416c35f64e874afbbaa5e8481c6687cee7fde3382404a24d920711707b8a5359e420b

    Score
    10/10
    zloader09/04botnettrojan

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

      trojanbotnetzloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks