General
-
Target
c5d4da4c9ca5a8c151ae0021ec2786d6
-
Size
165KB
-
Sample
210907-ya81lsdca4
-
MD5
c5d4da4c9ca5a8c151ae0021ec2786d6
-
SHA1
c621a630ccf6a045648a5277a0e7bca099c55be5
-
SHA256
1dd9a55cde021a3fabaa435b9c06ea123634eee38730044218350c822838b5de
-
SHA512
c603ce4ba594c4a0df23d5bf0f7c0a4e8b54850e1277cb6f96588482044559c744260ab87e865342cb4cc0fc1729422b16d25350baa656a5eef1d28945c18b19
Static task
static1
Behavioral task
behavioral1
Sample
c5d4da4c9ca5a8c151ae0021ec2786d6.exe
Resource
win7v20210408
Malware Config
Extracted
zloader
tim
tim
https://iqowijsdakm.com/gate.php
https://wiewjdmkfjn.com/gate.php
https://dksaoidiakjd.com/gate.php
https://iweuiqjdakjd.com/gate.php
https://yuidskadjna.com/gate.php
https://olksmadnbdj.com/gate.php
https://odsakmdfnbs.com/gate.php
https://odsakjmdnhsaj.com/gate.php
https://odjdnhsaj.com/gate.php
https://odoishsaj.com/gate.php
Targets
-
-
Target
c5d4da4c9ca5a8c151ae0021ec2786d6
-
Size
165KB
-
MD5
c5d4da4c9ca5a8c151ae0021ec2786d6
-
SHA1
c621a630ccf6a045648a5277a0e7bca099c55be5
-
SHA256
1dd9a55cde021a3fabaa435b9c06ea123634eee38730044218350c822838b5de
-
SHA512
c603ce4ba594c4a0df23d5bf0f7c0a4e8b54850e1277cb6f96588482044559c744260ab87e865342cb4cc0fc1729422b16d25350baa656a5eef1d28945c18b19
-
Blocklisted process makes network request
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Adds Run key to start application
-