General

  • Target

    f7c5fdac4daf9505c16d353fa9b0b577

  • Size

    667KB

  • Sample

    201214-aygfel3h8s

  • MD5

    f7c5fdac4daf9505c16d353fa9b0b577

  • SHA1

    0195de0967e2a5a851280fd99464ec739e0979dd

  • SHA256

    4c414d6237c225d3bba766647807b0f2c32d4f400e585ee3f7fbe3d8b3b54c70

  • SHA512

    e1f4fc7518895b6e936f4b528ff922f47c7dbe9596c3cf4f38fabf1e2a36117bf04269bb1f64b3beada6ccca6713c7f4bc79345f45e71dc691562bf6ba137892

Malware Config

Extracted

Family

zloader

Botnet

dll26

Campaign

dll26

C2

https://eecakesconf.at/web982/gate.php

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      f7c5fdac4daf9505c16d353fa9b0b577

    • Size

      667KB

    • MD5

      f7c5fdac4daf9505c16d353fa9b0b577

    • SHA1

      0195de0967e2a5a851280fd99464ec739e0979dd

    • SHA256

      4c414d6237c225d3bba766647807b0f2c32d4f400e585ee3f7fbe3d8b3b54c70

    • SHA512

      e1f4fc7518895b6e936f4b528ff922f47c7dbe9596c3cf4f38fabf1e2a36117bf04269bb1f64b3beada6ccca6713c7f4bc79345f45e71dc691562bf6ba137892

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

MITRE ATT&CK Matrix

Tasks