Overview

overview

10

Static

static

420d173305...bf.dll

windows7_x64

10

420d173305...bf.dll

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    420d173305f5d46ca47fc49999f9b1bf

  • Size

    667KB

  • Sample

    201214-ksgm4p2vcs

  • MD5

    420d173305f5d46ca47fc49999f9b1bf

  • SHA1

    0a012f03c260c67100b757dac6422408f46cc1a3

  • SHA256

    2ec1659438816ccaeedbc9f36e35b7adf24cd6153c5e0a43855a5b8103b272fc

  • SHA512

    f054be14b644bc54123bafd3ede2dbd48211ef1a9d37635d82952e62cc87243ce1f20ae16f3e009140ce388f615e2b2d8ce035c51e386135998306ea68f4312a

Score
10/10
zloaderdll26dll26botnettrojan

Malware Config

Extracted

Family

zloader

Botnet

dll26

Campaign

dll26

C2

https://eecakesconf.at/web982/gate.php

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      420d173305f5d46ca47fc49999f9b1bf

    • Size

      667KB

    • MD5

      420d173305f5d46ca47fc49999f9b1bf

    • SHA1

      0a012f03c260c67100b757dac6422408f46cc1a3

    • SHA256

      2ec1659438816ccaeedbc9f36e35b7adf24cd6153c5e0a43855a5b8103b272fc

    • SHA512

      f054be14b644bc54123bafd3ede2dbd48211ef1a9d37635d82952e62cc87243ce1f20ae16f3e009140ce388f615e2b2d8ce035c51e386135998306ea68f4312a

    Score
    10/10
    zloaderdll26dll26botnettrojan

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

      trojanbotnetzloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks