General

  • Target

    8b4cd38964a978be47ce8e04cf4d9187

  • Size

    667KB

  • Sample

    201214-54ss3hvtga

  • MD5

    8b4cd38964a978be47ce8e04cf4d9187

  • SHA1

    343570bca7074d59b1e3372854e9021aaf1df24a

  • SHA256

    fba91bfd4e8a0ec297cee0edd5ae715a6e11fc32bf751baf18fc9545a942c2b0

  • SHA512

    3e3d82449af99642f4d8d58611fb4d8b2b9cacd6451f95a551dde105f4475176a57df253b56612e0c244db6aba8cbf2960e582631f0b4b324590b134262e36ac

Malware Config

Extracted

Family

zloader

Botnet

dll26

Campaign

dll26

C2

https://eecakesconf.at/web982/gate.php

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      8b4cd38964a978be47ce8e04cf4d9187

    • Size

      667KB

    • MD5

      8b4cd38964a978be47ce8e04cf4d9187

    • SHA1

      343570bca7074d59b1e3372854e9021aaf1df24a

    • SHA256

      fba91bfd4e8a0ec297cee0edd5ae715a6e11fc32bf751baf18fc9545a942c2b0

    • SHA512

      3e3d82449af99642f4d8d58611fb4d8b2b9cacd6451f95a551dde105f4475176a57df253b56612e0c244db6aba8cbf2960e582631f0b4b324590b134262e36ac

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

MITRE ATT&CK Matrix

Tasks