General

  • Target

    microsoft_shared.tmp

  • Size

    369KB

  • Sample

    210320-qpfkl7fx3a

  • MD5

    08fb0dfc406671b03c9c9b8f39238321

  • SHA1

    0b85e55d662fc7f87c142250ffa54a52eb3df3cb

  • SHA256

    607a091d00b4660179f3b9c85bf1cd66edf3a2bc6bfcd794e60030b67363464c

  • SHA512

    e320d16b78a82835cf5d3aa762e83a32429998d062f8c832a437b20d00c69295223503f9b20766c7cfe5e45478d3c09ae0f44c2744875905f684a461af2f0c25

Malware Config

Extracted

Family

zloader

Botnet

personal

Campaign

personal

C2

https://iqowijsdakm.com/gate.php

https://wiewjdmkfjn.com/gate.php

https://dksaoidiakjd.com/gate.php

https://iweuiqjdakjd.com/gate.php

https://yuidskadjna.com/gate.php

https://olksmadnbdj.com/gate.php

https://odsakmdfnbs.com/gate.php

https://odsakjmdnhsaj.com/gate.php

https://odjdnhsaj.com/gate.php

https://odoishsaj.com/gate.php

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      microsoft_shared.tmp

    • Size

      369KB

    • MD5

      08fb0dfc406671b03c9c9b8f39238321

    • SHA1

      0b85e55d662fc7f87c142250ffa54a52eb3df3cb

    • SHA256

      607a091d00b4660179f3b9c85bf1cd66edf3a2bc6bfcd794e60030b67363464c

    • SHA512

      e320d16b78a82835cf5d3aa762e83a32429998d062f8c832a437b20d00c69295223503f9b20766c7cfe5e45478d3c09ae0f44c2744875905f684a461af2f0c25

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

MITRE ATT&CK Matrix

Tasks