General
-
Target
3740851312af7f75741d950015901cb7.exe
-
Size
165KB
-
Sample
210809-b2cr9gel5n
-
MD5
3740851312af7f75741d950015901cb7
-
SHA1
f80ae1f66de60f5c42cfbc555be1dfb291cd6d5a
-
SHA256
892ec03552cca2c62495e661fda9bfd113009f2d9b0a07c2b13d9f047953cb2f
-
SHA512
e3c2a268e86521510e97b719e94ea64cfd4b716bcbd2eed7d896598d694a8cb5445e53f70fc0fcf4863c550bb0b3381b610a10477254febc1d45ef90607eefce
Static task
static1
Behavioral task
behavioral1
Sample
3740851312af7f75741d950015901cb7.exe
Resource
win7v20210410
Malware Config
Extracted
zloader
vasja
vasja
https://iqowijsdakm.com/gate.php
https://wiewjdmkfjn.com/gate.php
https://dksaoidiakjd.com/gate.php
https://iweuiqjdakjd.com/gate.php
https://yuidskadjna.com/gate.php
https://olksmadnbdj.com/gate.php
https://odsakmdfnbs.com/gate.php
https://odsakjmdnhsaj.com/gate.php
https://odjdnhsaj.com/gate.php
https://odoishsaj.com/gate.php
Targets
-
-
Target
3740851312af7f75741d950015901cb7.exe
-
Size
165KB
-
MD5
3740851312af7f75741d950015901cb7
-
SHA1
f80ae1f66de60f5c42cfbc555be1dfb291cd6d5a
-
SHA256
892ec03552cca2c62495e661fda9bfd113009f2d9b0a07c2b13d9f047953cb2f
-
SHA512
e3c2a268e86521510e97b719e94ea64cfd4b716bcbd2eed7d896598d694a8cb5445e53f70fc0fcf4863c550bb0b3381b610a10477254febc1d45ef90607eefce
-
Blocklisted process makes network request
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Adds Run key to start application
-