General
-
Target
2d4358c9390a9586c2e262ebcec37535.exe
-
Size
165KB
-
Sample
210813-tcxdgnal12
-
MD5
2d4358c9390a9586c2e262ebcec37535
-
SHA1
36aad53c5bd366bb037da9e5a2569352a56d2df7
-
SHA256
0f527546d025e3705bdbba6eb98226373a8b8368bd1d2915a5f195541566d11e
-
SHA512
6367cea3f505eaaf588af49089d48486385dba77de7821c03f9ff6707bc47bffaa4cb3021999657b4effd633c52e3d46ae6231e026e6ac3b23c3853bf6b31429
Static task
static1
Behavioral task
behavioral1
Sample
2d4358c9390a9586c2e262ebcec37535.exe
Resource
win7v20210408
Malware Config
Extracted
zloader
vasja
vasja
https://iqowijsdakm.com/gate.php
https://wiewjdmkfjn.com/gate.php
https://dksaoidiakjd.com/gate.php
https://iweuiqjdakjd.com/gate.php
https://yuidskadjna.com/gate.php
https://olksmadnbdj.com/gate.php
https://odsakmdfnbs.com/gate.php
https://odsakjmdnhsaj.com/gate.php
https://odjdnhsaj.com/gate.php
https://odoishsaj.com/gate.php
Targets
-
-
Target
2d4358c9390a9586c2e262ebcec37535.exe
-
Size
165KB
-
MD5
2d4358c9390a9586c2e262ebcec37535
-
SHA1
36aad53c5bd366bb037da9e5a2569352a56d2df7
-
SHA256
0f527546d025e3705bdbba6eb98226373a8b8368bd1d2915a5f195541566d11e
-
SHA512
6367cea3f505eaaf588af49089d48486385dba77de7821c03f9ff6707bc47bffaa4cb3021999657b4effd633c52e3d46ae6231e026e6ac3b23c3853bf6b31429
-
Blocklisted process makes network request
-
Downloads MZ/PE file
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-