Overview

overview

10

Static

static

1243656.bin.dll

windows7_x64

10

1243656.bin.dll

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1243656.bin.zip

  • Size

    171KB

  • Sample

    210313-zsfndvvwzs

  • MD5

    c17f15ecdf5d779cb2ac221731f17b10

  • SHA1

    16e62d608b022151f70cd2bc08c89cc1f46770c1

  • SHA256

    026760f8167753f0a3f95b232f0a23cad6d18295e9b68381d7f61c20364c6e9b

  • SHA512

    5a7ac92cd1ffa5d48cc4583a35a9ead2686ba89337534c7390fc5fbdd409f69504d96f62b5dfbe3ff89eee487764bbab15a3965c1e2c71fb6980c72ef5e35c56

Score
10/10
zloadergoogleaktualizacijagoogleaktualizacija2botnettrojan

Malware Config

Extracted

Family

zloader

Botnet

googleaktualizacija

Campaign

googleaktualizacija2

C2

https://iqowijsdakm.com/gate.php

https://wiewjdmkfjn.com/gate.php

https://dksaoidiakjd.com/gate.php

https://iweuiqjdakjd.com/gate.php

https://yuidskadjna.com/gate.php

https://olksmadnbdj.com/gate.php

https://odsakmdfnbs.com/gate.php

https://odsakjmdnhsaj.com/gate.php

https://odjdnhsaj.com/gate.php

https://odoishsaj.com/gate.php
rc4.plain
rsa_pubkey.plain

Targets

    • Target

      1243656.bin

    • Size

      281KB

    • MD5

      7a4334c164c28530b28858559643c6b9

    • SHA1

      ee3ebcb8b28702c50b0083db163ba5876f40f54c

    • SHA256

      b250b1ccb8194ce1ccc86b4a88bd7279f6804fac990758e95d203fdd1d97dcc2

    • SHA512

      e58a00c9b7b947d573632097eb056b5791b0b3d4577ff5e4635b8056076d599240e128ac948a995c2c8102b2a2d4550c0d7edbd3d684f5364c44467f64e50c45

    Score
    10/10
    zloadergoogleaktualizacijagoogleaktualizacija2botnettrojan

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

      trojanbotnetzloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks