Overview

overview

10

Static

static

10

cf8e50db2c...e8.dll

windows7_x64

10

cf8e50db2c...e8.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cf8e50db2ca682dbc80110f394aa4bbd7b59a60ac6e981dcaab607d09b7f01e8.zip

  • Size

    111KB

  • Sample

    210304-sshdyr6paj

  • MD5

    77e4b446ad42b259dfe24b350ad96e6e

  • SHA1

    52fc4a81e9aecaef860c3b9ac3871dbd53799d1b

  • SHA256

    d26a36d47e1d5c998acaaf9ece01b9bb2680a4f60e56172063e5dcd6b2236163

  • SHA512

    f8257f28ef7c5b94a762ef25e35f9827ccc1d057cc6d3824dc0a5562073b384f4fdb283b22a4a085644fa8d0fc0d59ad025183bdf14aed1b3877b578df268897

Score
10/10
zloader07/04botnettrojan

Malware Config

Extracted

Family

zloader

Botnet

07/04

C2

https://xyajbocpggsr.site/wp-config.php

https://ooygvpxrb.pw/wp-config.php
rc4.plain

Targets

    • Target

      cf8e50db2ca682dbc80110f394aa4bbd7b59a60ac6e981dcaab607d09b7f01e8.dll

    • Size

      183KB

    • MD5

      d21ed162fd0252e22f31cf7a9cae5540

    • SHA1

      abe719477bf2f69765f401b400759cb71117bff7

    • SHA256

      cf8e50db2ca682dbc80110f394aa4bbd7b59a60ac6e981dcaab607d09b7f01e8

    • SHA512

      8751aa81aa6d53ae9e2fc0424d957a39a365ccba0680e18f0702eab26e48e317a0ca35d61f49197f59c24cc00893d91e06e34568fb5454f80b9c94dd3bc10a68

    Score
    10/10
    zloader07/04botnettrojan

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

      trojanbotnetzloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks