General
-
Target
aac2b6314988e0aea824fe0a53b917c1.exe
-
Size
165KB
-
Sample
210806-bxtt34r1ln
-
MD5
aac2b6314988e0aea824fe0a53b917c1
-
SHA1
17c0d629b7a2f940e7a69f1120582cf89f70355a
-
SHA256
6c8e5f1670515c6a9d3cdcafe6d9a782a87f0f085095558cc0116ea73281c059
-
SHA512
0245fb86597e7106ef24a7348b9251fbf3936ff3643f372bea90b0c736c1275695012ce699d47c709597c1972c6a2af977507ba7378eefa5a73afeea48559715
Static task
static1
Behavioral task
behavioral1
Sample
aac2b6314988e0aea824fe0a53b917c1.exe
Resource
win7v20210408
Malware Config
Extracted
zloader
vasja
vasja
https://iqowijsdakm.com/gate.php
https://wiewjdmkfjn.com/gate.php
https://dksaoidiakjd.com/gate.php
https://iweuiqjdakjd.com/gate.php
https://yuidskadjna.com/gate.php
https://olksmadnbdj.com/gate.php
https://odsakmdfnbs.com/gate.php
https://odsakjmdnhsaj.com/gate.php
https://odjdnhsaj.com/gate.php
https://odoishsaj.com/gate.php
Targets
-
-
Target
aac2b6314988e0aea824fe0a53b917c1.exe
-
Size
165KB
-
MD5
aac2b6314988e0aea824fe0a53b917c1
-
SHA1
17c0d629b7a2f940e7a69f1120582cf89f70355a
-
SHA256
6c8e5f1670515c6a9d3cdcafe6d9a782a87f0f085095558cc0116ea73281c059
-
SHA512
0245fb86597e7106ef24a7348b9251fbf3936ff3643f372bea90b0c736c1275695012ce699d47c709597c1972c6a2af977507ba7378eefa5a73afeea48559715
-
Blocklisted process makes network request
-
Downloads MZ/PE file
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-