Overview

overview

10

Static

static

r10959_order.exe

windows7_x64

1

r10959_order.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    r10959_order.zip

  • Size

    136KB

  • Sample

    201124-xpzc9r9tzs

  • MD5

    7b8b3c1870e2abe00f59254faa0a1665

  • SHA1

    8dcb9b87958be982fc44ddc8ea21ff5f14df40c0

  • SHA256

    5f0d80e14c09c7aab30949f50e11b4c079518c8cce8ba8cffa82efcb0ecb29b3

  • SHA512

    1b009c0bd7d26915466609e15be3c688c51478ab125852c411dcd2d7c86510c25190a69de8d63dc6b6f5c338463b074273104bc38850969df675c8391068c6fe

Score
10/10
zloaderr1r1botnettrojan

Malware Config

Extracted

Family

zloader

Botnet

r1

Campaign

r1

C2

https://notsweets.net/LKhwojehDgwegSDG/gateJKjdsh.php

https://olpons.com/LKhwojehDgwegSDG/gateJKjdsh.php

https://karamelliar.org/LKhwojehDgwegSDG/gateJKjdsh.php

https://dogrunn.com/LKhwojehDgwegSDG/gateJKjdsh.php

https://azoraz.net/LKhwojehDgwegSDG/gateJKjdsh.php
rc4.plain
rsa_pubkey.plain

Targets

    • Target

      r10959_order.exe

    • Size

      169KB

    • MD5

      86fc9993f4fe92809513a02d907205cd

    • SHA1

      a23217fa44754496be797902abe54aa661dc7774

    • SHA256

      edbb56fe63e565c456de8153a6c6782dc6697b6dac509eeb19a99e462d9e717d

    • SHA512

      0242225e1b5c2df539893cdc1fb873e8a7fcf30356d30474bb1ad68ed9f3126673c253d75141ef89b48953c8c11898d0d73d2aaa618b4f6e8b604a152a3a45e7

    Score
    10/10
    zloaderr1r1botnettrojan

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

      trojanbotnetzloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks