General

  • Target

    c68e80990502dc9b86fe4196af4a62985eb0a5ef56e06b9fa8bdf4ade2b9b668

  • Size

    306KB

  • Sample

    210615-sz2gcr1qda

  • MD5

    402cd29f7429abc1b4690c0c71770825

  • SHA1

    e826394c54c5827f1142b11adc5d550e335ec82e

  • SHA256

    c68e80990502dc9b86fe4196af4a62985eb0a5ef56e06b9fa8bdf4ade2b9b668

  • SHA512

    a726eb34ec1bf0d97697adc7cf0db8ad38a53cefcf1aa7d6ddb938b0924ae11822ba7713be4d9b0de186541e37a0517e40003056aec0208304b2e5b7f3fa0012

Malware Config

Extracted

Family

zloader

Botnet

googleaktualizacija

Campaign

googleaktualizacija2

C2

https://iqowijsdakm.com/gate.php

https://wiewjdmkfjn.com/gate.php

https://dksaoidiakjd.com/gate.php

https://iweuiqjdakjd.com/gate.php

https://yuidskadjna.com/gate.php

https://olksmadnbdj.com/gate.php

https://odsakmdfnbs.com/gate.php

https://odsakjmdnhsaj.com/gate.php

https://odjdnhsaj.com/gate.php

https://odoishsaj.com/gate.php

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      c68e80990502dc9b86fe4196af4a62985eb0a5ef56e06b9fa8bdf4ade2b9b668

    • Size

      306KB

    • MD5

      402cd29f7429abc1b4690c0c71770825

    • SHA1

      e826394c54c5827f1142b11adc5d550e335ec82e

    • SHA256

      c68e80990502dc9b86fe4196af4a62985eb0a5ef56e06b9fa8bdf4ade2b9b668

    • SHA512

      a726eb34ec1bf0d97697adc7cf0db8ad38a53cefcf1aa7d6ddb938b0924ae11822ba7713be4d9b0de186541e37a0517e40003056aec0208304b2e5b7f3fa0012

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

MITRE ATT&CK Matrix

Tasks