Resubmissions

23-03-2021 23:39

210323-gwmsg5pk56 10

General

  • Target

    e4d0a79d2463c5d3a71874e3389fa753f480b96639ad32baf1997baf8e5f714a

  • Size

    187KB

  • MD5

    6a900d6f8af3a1a0e31ca5bb63637d03

  • SHA1

    221ab3d8ab16a0a7790026aab9b26904be6db436

  • SHA256

    e4d0a79d2463c5d3a71874e3389fa753f480b96639ad32baf1997baf8e5f714a

  • SHA512

    7565f88ae40d6ab1953fc018694154846f8ab98410239947ad5101686cbb9a59032858cb12218e89e27715d1d77a8b941141137886e241924a8f3801999661a8

Score
10/10

Malware Config

Extracted

Family

zloader

Botnet

Apr14

Campaign

Spam

C2

http://wmwifbajxxbcxmucxmlc.com/post.php

http://ojnxjgfjlftfkkuxxiqd.com/post.php

http://pwkqhdgytsshkoibaake.com/post.php

http://snnmnkxdhflwgthqismb.com/post.php

http://iawfqecrwohcxnhwtofa.com/post.php

http://nlbmfsyplohyaicmxhum.com/post.php

http://fvqlkgedqjiqgapudkgq.com/post.php

http://cmmxhurildiigqghlryq.com/post.php

http://nmqsmbiabjdnuushksas.com/post.php

http://fyratyubvflktyyjiqgq.com/post.php

rc4.plain

Signatures

Files

  • e4d0a79d2463c5d3a71874e3389fa753f480b96639ad32baf1997baf8e5f714a
    .dll windows x86 regsvr32


    Exports