General

  • Target

    1960546.dll

  • Size

    453KB

  • Sample

    210330-zksrjx41mx

  • MD5

    6cdcdd2a2211570c00b3239ae350ee4c

  • SHA1

    edfdc0cd64af23cc2a5ba21e00410d9451d0871a

  • SHA256

    574ab0eb02d9059cd771a6af0c467dfa1ac487baf10c54723e6b04771aa48059

  • SHA512

    febd3bdfa6a29408c89f4f485f968013d517407e530ae17815a8fded39f4c124a851b7089755474db4d56dbc4dfc759bc2adc1c788fbaab830b736b1391cd09c

Malware Config

Extracted

Family

zloader

Botnet

googleaktualizacija

Campaign

googleaktualizacija2

C2

https://iqowijsdakm.com/gate.php

https://wiewjdmkfjn.com/gate.php

https://dksaoidiakjd.com/gate.php

https://iweuiqjdakjd.com/gate.php

https://yuidskadjna.com/gate.php

https://olksmadnbdj.com/gate.php

https://odsakmdfnbs.com/gate.php

https://odsakjmdnhsaj.com/gate.php

https://odjdnhsaj.com/gate.php

https://odoishsaj.com/gate.php

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      1960546.dll

    • Size

      453KB

    • MD5

      6cdcdd2a2211570c00b3239ae350ee4c

    • SHA1

      edfdc0cd64af23cc2a5ba21e00410d9451d0871a

    • SHA256

      574ab0eb02d9059cd771a6af0c467dfa1ac487baf10c54723e6b04771aa48059

    • SHA512

      febd3bdfa6a29408c89f4f485f968013d517407e530ae17815a8fded39f4c124a851b7089755474db4d56dbc4dfc759bc2adc1c788fbaab830b736b1391cd09c

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

MITRE ATT&CK Matrix

Tasks