Overview

overview

10

Static

static

ZLoader.dll

windows7_x64

10

ZLoader.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ZLoader.dll

  • Size

    400KB

  • Sample

    210519-pzcds9kjqj

  • MD5

    3b77d25a150d4d455c47826189a067c4

  • SHA1

    68e137be0f581effb9e2c88d99a66059cbd5ce3d

  • SHA256

    28e2cca389fced68919126d4cd524d399c19da7930737c1297b71e23789f7f84

  • SHA512

    854587bd6229e49e0882e3c2c4e3735ff822e035ec76daa1129fe82f19d05fa6cf6232b61d2636445423c9d9b57db327b72d1246a1ebb539f37d7d1f97f95d27

Score
10/10
zloadernut12/11botnettrojan

Malware Config

Extracted

Family

zloader

Botnet

nut

Campaign

12/11

C2

https://tfbuildingjoinery.co.uk/robots.php

https://globalpacificproperties.com.au/terms.php

https://www.loonybinforum.com/errors.php

https://luminousintent.com.au/wp-smarts.php

https://espazioabierto.com/wp-smarts.php

https://racriporrosepo.tk/wp-smarts.php
rc4.plain
rsa_pubkey.plain

Targets

    • Target

      ZLoader.dll

    • Size

      400KB

    • MD5

      3b77d25a150d4d455c47826189a067c4

    • SHA1

      68e137be0f581effb9e2c88d99a66059cbd5ce3d

    • SHA256

      28e2cca389fced68919126d4cd524d399c19da7930737c1297b71e23789f7f84

    • SHA512

      854587bd6229e49e0882e3c2c4e3735ff822e035ec76daa1129fe82f19d05fa6cf6232b61d2636445423c9d9b57db327b72d1246a1ebb539f37d7d1f97f95d27

    Score
    10/10
    zloadernut12/11botnettrojan

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

      trojanbotnetzloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks