General

  • Target

    8eea435b67f4fe16b31c412a0648da64b919fd7eff69e33f22730ff5445e6fe3

  • Size

    306KB

  • Sample

    210615-12s6dqyz1x

  • MD5

    993ac46f574f979e7c4353a710dad8a9

  • SHA1

    9ea1f0d5f56155d71a6e39208ea2b8bb67dbcf6d

  • SHA256

    8eea435b67f4fe16b31c412a0648da64b919fd7eff69e33f22730ff5445e6fe3

  • SHA512

    aa4024e90a9a4bfec1bd6d923e42b37a4c1981a3a9c6c910811f128963f9d8aa06c71c11730ea63ec7f2888c3070b1783b93290fa568f848be3a115b43239869

Malware Config

Extracted

Family

zloader

Botnet

googleaktualizacija

Campaign

googleaktualizacija2

C2

https://iqowijsdakm.com/gate.php

https://wiewjdmkfjn.com/gate.php

https://dksaoidiakjd.com/gate.php

https://iweuiqjdakjd.com/gate.php

https://yuidskadjna.com/gate.php

https://olksmadnbdj.com/gate.php

https://odsakmdfnbs.com/gate.php

https://odsakjmdnhsaj.com/gate.php

https://odjdnhsaj.com/gate.php

https://odoishsaj.com/gate.php

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      8eea435b67f4fe16b31c412a0648da64b919fd7eff69e33f22730ff5445e6fe3

    • Size

      306KB

    • MD5

      993ac46f574f979e7c4353a710dad8a9

    • SHA1

      9ea1f0d5f56155d71a6e39208ea2b8bb67dbcf6d

    • SHA256

      8eea435b67f4fe16b31c412a0648da64b919fd7eff69e33f22730ff5445e6fe3

    • SHA512

      aa4024e90a9a4bfec1bd6d923e42b37a4c1981a3a9c6c910811f128963f9d8aa06c71c11730ea63ec7f2888c3070b1783b93290fa568f848be3a115b43239869

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

MITRE ATT&CK Matrix

Tasks