General
-
Target
logs.php.bin
-
Size
368KB
-
Sample
210224-gf3ncd874e
-
MD5
4bf3af70dcbddb2176b0bf611a8f945c
-
SHA1
59bbd8de9de9f891adb73b4c5711cfb7a3073fa5
-
SHA256
22a0ceb74f566484220466e975d4fa835f4edf6279f9426f36498d8aa3337017
-
SHA512
ff2f75d15d5bfffb2a5cae30e231d2fc1c33adc9fc4b771e1eb5587d4761ebdc2afff3618f218ffa7c020b11f264217916acb2c6114a5752c53dda13af89134f
Static task
static1
Behavioral task
behavioral1
Sample
logs.php.bin.dll
Resource
win7v20201028
Malware Config
Extracted
zloader
nut
22/02
https://sanfilippowholesale.ca/post.php
https://veprotech.com/post.php
https://globalgroots.com/post.php
https://silicontradewind.com/post.php
https://dhyanalingagranites.in/post.php
https://onushondhanbarta.com/post.php
https://avcity.in/post.php
https://docapiridelli.ml/post.php
Targets
-
-
Target
logs.php.bin
-
Size
368KB
-
MD5
4bf3af70dcbddb2176b0bf611a8f945c
-
SHA1
59bbd8de9de9f891adb73b4c5711cfb7a3073fa5
-
SHA256
22a0ceb74f566484220466e975d4fa835f4edf6279f9426f36498d8aa3337017
-
SHA512
ff2f75d15d5bfffb2a5cae30e231d2fc1c33adc9fc4b771e1eb5587d4761ebdc2afff3618f218ffa7c020b11f264217916acb2c6114a5752c53dda13af89134f
-
Blocklisted process makes network request
-
Suspicious use of SetThreadContext
-