General

  • Target

    270cbb3393119258ff8db610d8b48556b582c3fcd1bfeca457a6311b5cdf0908.zip

  • Size

    380KB

  • Sample

    210402-b6hzhz7pmn

  • MD5

    cc27b830e3bc7836962c3651a558b126

  • SHA1

    5b57ef6fbdc36c8d32728538bfcae255cacb4561

  • SHA256

    0bd3068827cbac643e6d52c0f9106d97f22c5ca5a200e98d4388a6886f670889

  • SHA512

    f725de87ecd7bd42c070ed1ffad97eea3e09eb8c047eaa148462d23e40129a2ab02f9ce725f0dc49c43ae148f711aa898d4a23a9eaa0ec72ace138e11b96e7c7

Malware Config

Extracted

Family

zloader

Botnet

nut

Campaign

30/03

C2

https://holacast.com/post.php

https://homeloansadvisor.in/post.php

https://hoteldonalala.com.mx/post.php

https://hotimobiliaria.com.br/post.php

https://hrdgschool.com/post.php

https://huloolcreations.com/post.php

https://hyundainhatrang.vn/post.php

https://iaikotasemarang.id/post.php

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      270cbb3393119258ff8db610d8b48556b582c3fcd1bfeca457a6311b5cdf0908.dll

    • Size

      619KB

    • MD5

      87e4b79e02c038bb1dda5e53bd502703

    • SHA1

      fe6083dfea6a0727e6f9ec215fa1bddd6a981b8b

    • SHA256

      270cbb3393119258ff8db610d8b48556b582c3fcd1bfeca457a6311b5cdf0908

    • SHA512

      7ea3f1645ed8268717f263583255372cc6e151d3f0824e16b0ba7af5fdb1882f97858f7ac9dcc1d585537dd6a12a540878fae9af83b76495c3695487646bba22

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

MITRE ATT&CK Matrix

Tasks