General

  • Target

    314ac0158727ba0bed95d244200e569e5aa9528f4c567c1c2c5cfba542fe545c

  • Size

    666KB

  • Sample

    210914-y3hzwsbccn

  • MD5

    dac52df1477fe8b567b656c1da2e876f

  • SHA1

    4b020a24c3d68b21b586a531e04d558f04de4f52

  • SHA256

    314ac0158727ba0bed95d244200e569e5aa9528f4c567c1c2c5cfba542fe545c

  • SHA512

    fb36eb6c6327b8e51cb5230ab5206b2fb327ff440d3e9219535b75b39bd6d03871be7069960120238072a2b0c29ba5716ba8868d02a1fc85b0a62445454cc240

Malware Config

Extracted

Family

zloader

Botnet

nut

Campaign

13/04

C2

https://jiaayanu.com/post.php

https://investinszeklerland.eu/post.php

https://iqs-sac.com/post.php

https://jciems.in/post.php

https://jinnahofficersschool.com/post.php

https://kancagh.com/post.php

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      314ac0158727ba0bed95d244200e569e5aa9528f4c567c1c2c5cfba542fe545c

    • Size

      666KB

    • MD5

      dac52df1477fe8b567b656c1da2e876f

    • SHA1

      4b020a24c3d68b21b586a531e04d558f04de4f52

    • SHA256

      314ac0158727ba0bed95d244200e569e5aa9528f4c567c1c2c5cfba542fe545c

    • SHA512

      fb36eb6c6327b8e51cb5230ab5206b2fb327ff440d3e9219535b75b39bd6d03871be7069960120238072a2b0c29ba5716ba8868d02a1fc85b0a62445454cc240

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

MITRE ATT&CK Matrix

Tasks