Overview

overview

10

Static

static

10

4722359f79...cd.dll

windows7_x64

10

4722359f79...cd.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4722359f79b6a7f7738b8444b8bf6f61f0ac171bd50243ffccdfbc0a1ebcddcd.zip

  • Size

    107KB

  • MD5

    927713b741d66cbf5bd4a0fa9cef0877

  • SHA1

    3377592b1962d1d94b6fd7a75ebee6b2526a791f

  • SHA256

    df451db66ebd05e1b23cc6dd75651f29e13663ba54617a95fdfe18d58677e7ae

  • SHA512

    1b5533153a172cc6ba12cdc5db782fcbaea9f49bc8383ee62f5702465c59228f0839f6603be820fa9ac514c92721dd49a678a0e853d639c63e577d3b527b2841

Score
10/10
bankingbankingzloader

Malware Config

Extracted

Family

zloader

Botnet

banking

Campaign

banking

C2

https://iloveyoubaby1.pro/gate.php

https://idsakjfsanfaskj.com/gate.php

https://fslakdasjdnsasjsj.com/gate.php

https://dksadjsahnfaskmsa.com/gate.php

https://dskdsajdsahda.info/gate.php

https://dskdsajdsadasda.info/gate.php

https://dskjdsadhsahjsas.info/gate.php

https://dsjadjsadjsadjafsa.info/gate.php

https://fsakjdsafasifkajfaf.pro/gate.php

https://djsadhsadsadjashs.pro/gate.php
rc4.plain

Signatures

Files

  • 4722359f79b6a7f7738b8444b8bf6f61f0ac171bd50243ffccdfbc0a1ebcddcd.zip
    .zip

    Password: infected

  • 4722359f79b6a7f7738b8444b8bf6f61f0ac171bd50243ffccdfbc0a1ebcddcd.dll
    .dll windows x86 regsvr32


    Exports