General

  • Target

    cbf6848b72b118e090953347982de71cfe1510dfdc4affdb1ee4d5d62af428d6.zip

  • Size

    157KB

  • Sample

    210302-ntgn4p27y6

  • MD5

    303fc2099c02e2e68ff8919fc00855b8

  • SHA1

    878db7068382f8e5da784ed01e143ab916516438

  • SHA256

    e61b42f48f424b50d3f3c999f736079a2228fdb93ec773d5dd894b79400d924f

  • SHA512

    b567f86cfe616ac8433b9cfdf8670f8a393e5d5b7894e8c827ece9d9d332365ac23e5f513fb52c88fdc6d9d8c0d4b61e6c448a6485bf0307697a1a1b267f3ad5

Malware Config

Extracted

Family

zloader

Botnet

personal

Campaign

personal

C2

https://iqowijsdakm.com/gate.php

https://wiewjdmkfjn.com/gate.php

https://dksaoidiakjd.com/gate.php

https://iweuiqjdakjd.com/gate.php

https://yuidskadjna.com/gate.php

https://olksmadnbdj.com/gate.php

https://odsakmdfnbs.com/gate.php

https://odsakjmdnhsaj.com/gate.php

https://odjdnhsaj.com/gate.php

https://odoishsaj.com/gate.php

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      cbf6848b72b118e090953347982de71cfe1510dfdc4affdb1ee4d5d62af428d6.dll

    • Size

      574KB

    • MD5

      d657bd947fecdb34e989349b6f72daac

    • SHA1

      36d0b1172673405a7d144a1a34841e794cea9e5a

    • SHA256

      cbf6848b72b118e090953347982de71cfe1510dfdc4affdb1ee4d5d62af428d6

    • SHA512

      02ce2ee305c8ec66abc66cd6a5dde4d9edd863a19c800e667b5db746b3f0b8ca0104fd372095dfdcc696a8960c58c594261265461c9caca543501f8c02171e4f

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

MITRE ATT&CK Matrix

Tasks