General

  • Target

    607a091d00b4660179f3b9c85bf1cd66edf3a2bc6bfcd794e60030b67363464c.zip

  • Size

    203KB

  • Sample

    210323-6bbg5wnnes

  • MD5

    c32606b2f8ecaba743ce02f8dba23f3c

  • SHA1

    8a16923e83c9128763f4943b13a21655065b4cad

  • SHA256

    5aae37dce4b8664a8ff3553177d82e6ca43d18b967f9dbc7ce00b50ab762e100

  • SHA512

    653f727346436f742acd7077810a00ea247047cab69da6e863e6cfae3d16fbe25c47c4294814b08ced00b9c5cf178adc1faa75bbd7a77a6483b727fefdda4449

Malware Config

Extracted

Family

zloader

Botnet

personal

Campaign

personal

C2

https://iqowijsdakm.com/gate.php

https://wiewjdmkfjn.com/gate.php

https://dksaoidiakjd.com/gate.php

https://iweuiqjdakjd.com/gate.php

https://yuidskadjna.com/gate.php

https://olksmadnbdj.com/gate.php

https://odsakmdfnbs.com/gate.php

https://odsakjmdnhsaj.com/gate.php

https://odjdnhsaj.com/gate.php

https://odoishsaj.com/gate.php

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      607a091d00b4660179f3b9c85bf1cd66edf3a2bc6bfcd794e60030b67363464c.exe

    • Size

      369KB

    • MD5

      08fb0dfc406671b03c9c9b8f39238321

    • SHA1

      0b85e55d662fc7f87c142250ffa54a52eb3df3cb

    • SHA256

      607a091d00b4660179f3b9c85bf1cd66edf3a2bc6bfcd794e60030b67363464c

    • SHA512

      e320d16b78a82835cf5d3aa762e83a32429998d062f8c832a437b20d00c69295223503f9b20766c7cfe5e45478d3c09ae0f44c2744875905f684a461af2f0c25

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

MITRE ATT&CK Matrix

Tasks