General

  • Target

    afd0df3341add43b263b1ecb4a52905c

  • Size

    667KB

  • Sample

    201214-jcne3qr9rn

  • MD5

    afd0df3341add43b263b1ecb4a52905c

  • SHA1

    d8dc8121ed006cf2a77e671e01e8bbc921695541

  • SHA256

    ce4edec3111f584bc29e51a2b92011c0316f5bc570b00fc4eba16e15e426d5ef

  • SHA512

    13584a0fb48fb1396239182c14a9f341c03099b6247a7f361dcba5e1e55e8ce58b3a734d6eadeb4cbbfe37678621d06202c3f3b4fb82211d2ba55093705e9674

Malware Config

Extracted

Family

zloader

Botnet

dll26

Campaign

dll26

C2

https://eecakesconf.at/web982/gate.php

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      afd0df3341add43b263b1ecb4a52905c

    • Size

      667KB

    • MD5

      afd0df3341add43b263b1ecb4a52905c

    • SHA1

      d8dc8121ed006cf2a77e671e01e8bbc921695541

    • SHA256

      ce4edec3111f584bc29e51a2b92011c0316f5bc570b00fc4eba16e15e426d5ef

    • SHA512

      13584a0fb48fb1396239182c14a9f341c03099b6247a7f361dcba5e1e55e8ce58b3a734d6eadeb4cbbfe37678621d06202c3f3b4fb82211d2ba55093705e9674

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

MITRE ATT&CK Matrix

Tasks