General

  • Target

    076308b6ecd17ff4630abc5aa5028d13.bin.zip

  • Size

    372KB

  • Sample

    210415-kdqlber9zx

  • MD5

    a70ad6c2011de0e4a68d8e4f9e91fe21

  • SHA1

    30c05901c457b6322ecf8efd62f7feed63ef9e62

  • SHA256

    849cf9558e64477fe9995d796c04742e025250cdbf2e46f111dc456fe7e05823

  • SHA512

    55aececdc1025ebbbe75b51712ab91fb49f4035bfeb25702882d639edc4f80b36fcae0c70a15887cacd0fbf6d0970c44cd31095ea52235cae1a65595b4c848c7

Malware Config

Extracted

Family

zloader

Botnet

nut

Campaign

30/03

C2

https://holacast.com/post.php

https://homeloansadvisor.in/post.php

https://hoteldonalala.com.mx/post.php

https://hotimobiliaria.com.br/post.php

https://hrdgschool.com/post.php

https://huloolcreations.com/post.php

https://hyundainhatrang.vn/post.php

https://iaikotasemarang.id/post.php

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      076308b6ecd17ff4630abc5aa5028d13.bin

    • Size

      619KB

    • MD5

      076308b6ecd17ff4630abc5aa5028d13

    • SHA1

      06e69b783ea7a0d37539f20d1edadc2b8a6ae70e

    • SHA256

      9f461b952b6e648c57d22e3a4728494c11871a919ec73947cffe360dd4dd17ba

    • SHA512

      f073806770b4c0a305501a429bb2c728d80143d56adf95509450d2ac68d7c43ed49d484cbd0fdfa4bbfc9c81af1e9d53a3862693a8ba1a293143b9b20fa161b3

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

MITRE ATT&CK Matrix

Tasks