Overview

overview

10

Static

static

10

cf8e50db2c...e8.dll

windows7_x64

10

cf8e50db2c...e8.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cf8e50db2ca682dbc80110f394aa4bbd7b59a60ac6e981dcaab607d09b7f01e8

  • Size

    183KB

  • Sample

    201110-j8efkjyewn

  • MD5

    d21ed162fd0252e22f31cf7a9cae5540

  • SHA1

    abe719477bf2f69765f401b400759cb71117bff7

  • SHA256

    cf8e50db2ca682dbc80110f394aa4bbd7b59a60ac6e981dcaab607d09b7f01e8

  • SHA512

    8751aa81aa6d53ae9e2fc0424d957a39a365ccba0680e18f0702eab26e48e317a0ca35d61f49197f59c24cc00893d91e06e34568fb5454f80b9c94dd3bc10a68

Score
10/10
zloader07/04botnettrojan

Malware Config

Extracted

Family

zloader
Botnet

07/04
C2

https://xyajbocpggsr.site/wp-config.php

https://ooygvpxrb.pw/wp-config.php
rc4.plain

Targets

    • Target

      cf8e50db2ca682dbc80110f394aa4bbd7b59a60ac6e981dcaab607d09b7f01e8

    • Size

      183KB

    • MD5

      d21ed162fd0252e22f31cf7a9cae5540

    • SHA1

      abe719477bf2f69765f401b400759cb71117bff7

    • SHA256

      cf8e50db2ca682dbc80110f394aa4bbd7b59a60ac6e981dcaab607d09b7f01e8

    • SHA512

      8751aa81aa6d53ae9e2fc0424d957a39a365ccba0680e18f0702eab26e48e317a0ca35d61f49197f59c24cc00893d91e06e34568fb5454f80b9c94dd3bc10a68

    Score
    10/10
    zloader07/04botnettrojan

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

      trojanbotnetzloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Collection

    Command and Control

      Credential Access

        Defense Evasion

          Discovery

            Execution

              Exfiltration

                Impact

                  Initial Access

                    Lateral Movement

                      Persistence

                        Privilege Escalation

                          Tasks