Overview

overview

10

Static

static

10

4480be0491...04.dll

windows7_x64

10

4480be0491...04.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4480be0491a4e2b03910757fe9ed868736e9b795f07205a66d2bf19253d9b104.zip

  • Size

    111KB

  • Sample

    210304-dley6q3wc2

  • MD5

    260f55999076211d0bb687eb9ac24191

  • SHA1

    1d63cfd25e154161a652af535318120a60032bdb

  • SHA256

    81eb75e4ddc107718bedb39c72c1fae12541dc69d586510d1a89de7d7893620f

  • SHA512

    9f20346f23658737fc161ca81672689d4ab439a2294acf50450e7038d3923cd2f0e0b53d19b08ecb9db1a377b526e91115bedf0288e52dd60a3f7891ac279438

Score
10/10
zloadermiguel08/04botnettrojan

Malware Config

Extracted

Family

zloader

Botnet

miguel

Campaign

08/04

C2

https://kuaxbdkvbbmivbxkrrev.com/wp-config.php

https://hwbblyyrb.pw/wp-config.php
rc4.plain

Targets

    • Target

      4480be0491a4e2b03910757fe9ed868736e9b795f07205a66d2bf19253d9b104.dll

    • Size

      183KB

    • MD5

      d674bca869b8452501dbe9d467a75c52

    • SHA1

      db637cc185267090764a82a05f16108b9e86f764

    • SHA256

      4480be0491a4e2b03910757fe9ed868736e9b795f07205a66d2bf19253d9b104

    • SHA512

      5aaba2fd5cf4d056fbb65fad52787cc6959b2f037b5de0f173dea96a7ed479193186074c04d6eca05d6252d692e709c4f1d442d6946373a13d4936f741f30c84

    Score
    10/10
    zloadermiguel08/04botnettrojan

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

      trojanbotnetzloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks