General

  • Target

    microsoft_shared.tmp

  • Size

    574KB

  • Sample

    201205-e4k79bke7e

  • MD5

    d657bd947fecdb34e989349b6f72daac

  • SHA1

    36d0b1172673405a7d144a1a34841e794cea9e5a

  • SHA256

    cbf6848b72b118e090953347982de71cfe1510dfdc4affdb1ee4d5d62af428d6

  • SHA512

    02ce2ee305c8ec66abc66cd6a5dde4d9edd863a19c800e667b5db746b3f0b8ca0104fd372095dfdcc696a8960c58c594261265461c9caca543501f8c02171e4f

Malware Config

Extracted

Family

zloader

Botnet

personal

Campaign

personal

C2

https://iqowijsdakm.com/gate.php

https://wiewjdmkfjn.com/gate.php

https://dksaoidiakjd.com/gate.php

https://iweuiqjdakjd.com/gate.php

https://yuidskadjna.com/gate.php

https://olksmadnbdj.com/gate.php

https://odsakmdfnbs.com/gate.php

https://odsakjmdnhsaj.com/gate.php

https://odjdnhsaj.com/gate.php

https://odoishsaj.com/gate.php

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      microsoft_shared.tmp

    • Size

      574KB

    • MD5

      d657bd947fecdb34e989349b6f72daac

    • SHA1

      36d0b1172673405a7d144a1a34841e794cea9e5a

    • SHA256

      cbf6848b72b118e090953347982de71cfe1510dfdc4affdb1ee4d5d62af428d6

    • SHA512

      02ce2ee305c8ec66abc66cd6a5dde4d9edd863a19c800e667b5db746b3f0b8ca0104fd372095dfdcc696a8960c58c594261265461c9caca543501f8c02171e4f

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

MITRE ATT&CK Matrix

Tasks