General

  • Target

    287352aca562a84f441ad7794832770ddfe283a8f05bab7a37f2ba66f3dc7edf.zip

  • Size

    380KB

  • Sample

    210402-61scqh2mze

  • MD5

    8b3f02dc4667e7d39ccaff970626a46d

  • SHA1

    99ecf9ee29cb581ba2d28304912322e3f10b6ba5

  • SHA256

    c37bc29895eae8a3410142b9eaa4b8a125def1f2261c8642534bd56e135514fc

  • SHA512

    ac0af126632e4f9f3cd7c61a94c49ecad7084ec17608c2cd62213a9903e16ba91bfcbcdcdfdab683db68574538937e1b21dead4aa2b23d34dff4eb7e36a03a23

Malware Config

Extracted

Family

zloader

Botnet

nut

Campaign

30/03

C2

https://holacast.com/post.php

https://homeloansadvisor.in/post.php

https://hoteldonalala.com.mx/post.php

https://hotimobiliaria.com.br/post.php

https://hrdgschool.com/post.php

https://huloolcreations.com/post.php

https://hyundainhatrang.vn/post.php

https://iaikotasemarang.id/post.php

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      287352aca562a84f441ad7794832770ddfe283a8f05bab7a37f2ba66f3dc7edf.dll

    • Size

      619KB

    • MD5

      a467c5e63940b8bc9b56f382aa20ea94

    • SHA1

      eac1e8911a5fced479130bd8c7382aa6cb3278c9

    • SHA256

      287352aca562a84f441ad7794832770ddfe283a8f05bab7a37f2ba66f3dc7edf

    • SHA512

      2bf61eb3264e2171cb4dad95018ac5dca826950821f5b8c8a1399bac6fe55dab258fd54f12f3d3c83039ce37b43f292fefc02082010f102a26e86bccc04a1ce9

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

MITRE ATT&CK Matrix

Tasks