zloader | 4480be0491a4e2b03910757fe9ed868736e9b795f07205a66d2bf19253d9b104 | Triage

Sharing

General

Target

4480be0491a4e2b03910757fe9ed868736e9b795f07205a66d2bf19253d9b104
Size

183KB
Sample

201110-hm1v5rgny6
MD5

d674bca869b8452501dbe9d467a75c52
SHA1

db637cc185267090764a82a05f16108b9e86f764
SHA256

4480be0491a4e2b03910757fe9ed868736e9b795f07205a66d2bf19253d9b104
SHA512

5aaba2fd5cf4d056fbb65fad52787cc6959b2f037b5de0f173dea96a7ed479193186074c04d6eca05d6252d692e709c4f1d442d6946373a13d4936f741f30c84

Score

10^/10

zloader miguel 08/04 botnet trojan

Malware Config

Extracted

Family

zloader

Botnet

miguel

Campaign

08/04

C2

https://kuaxbdkvbbmivbxkrrev.com/wp-config.php

https://hwbblyyrb.pw/wp-config.php

rc4.plain

Targets

- Target
  
  4480be0491a4e2b03910757fe9ed868736e9b795f07205a66d2bf19253d9b104
- Size
  
  183KB
- MD5
  
  d674bca869b8452501dbe9d467a75c52
- SHA1
  
  db637cc185267090764a82a05f16108b9e86f764
- SHA256
  
  4480be0491a4e2b03910757fe9ed868736e9b795f07205a66d2bf19253d9b104
- SHA512
  
  5aaba2fd5cf4d056fbb65fad52787cc6959b2f037b5de0f173dea96a7ed479193186074c04d6eca05d6252d692e709c4f1d442d6946373a13d4936f741f30c84
Score

10^/10

zloader miguel 08/04 botnet trojan
- Zloader, Terdot, DELoader, ZeusSphinx
  Zloader is a malware strain that was initially discovered back in August 2015.
  trojan botnet zloader
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

miguel08/04zloader

behavioral1

zloadermiguel08/04botnettrojan

behavioral2

zloadermiguel08/04botnettrojan