General

  • Target

    f049bc2e1d492fd242d906e01612d4fda6de1272685d1ca4aabc37d742fa9588

  • Size

    311KB

  • Sample

    210416-c8yz4bhbza

  • MD5

    25c714013c34af91b9ca850a80d70eda

  • SHA1

    1fad812ef985e29b469aedada4b5a785bd498450

  • SHA256

    f049bc2e1d492fd242d906e01612d4fda6de1272685d1ca4aabc37d742fa9588

  • SHA512

    8164a3ab31e12197745a593d6afc3014167da405abc95a0993e162bd7ab129be0f60526dd107dff0d271e3fb0a13c1ee0dd3e2c9da7211cdc91c06501f71657f

Malware Config

Extracted

Family

zloader

Botnet

googleaktualizacija

Campaign

googleaktualizacija2

C2

https://iqowijsdakm.com/gate.php

https://wiewjdmkfjn.com/gate.php

https://dksaoidiakjd.com/gate.php

https://iweuiqjdakjd.com/gate.php

https://yuidskadjna.com/gate.php

https://olksmadnbdj.com/gate.php

https://odsakmdfnbs.com/gate.php

https://odsakjmdnhsaj.com/gate.php

https://odjdnhsaj.com/gate.php

https://odoishsaj.com/gate.php

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      f049bc2e1d492fd242d906e01612d4fda6de1272685d1ca4aabc37d742fa9588

    • Size

      311KB

    • MD5

      25c714013c34af91b9ca850a80d70eda

    • SHA1

      1fad812ef985e29b469aedada4b5a785bd498450

    • SHA256

      f049bc2e1d492fd242d906e01612d4fda6de1272685d1ca4aabc37d742fa9588

    • SHA512

      8164a3ab31e12197745a593d6afc3014167da405abc95a0993e162bd7ab129be0f60526dd107dff0d271e3fb0a13c1ee0dd3e2c9da7211cdc91c06501f71657f

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

MITRE ATT&CK Matrix

Tasks