Overview

overview

10

Static

static

tim.dll

windows7_x64

10

tim.dll

windows10_x64

10

Resubmissions

12-10-2021 18:50

211012-xhew3adbd2 10

27-09-2021 20:56

210927-zrbbcaabhl 10

14-09-2021 15:35

210914-s1ddqsfhf8 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tim.dll

  • Size

    429KB

  • Sample

    211012-xhew3adbd2

  • MD5

    75784d297b3d6fb4d434b6890f6334ab

  • SHA1

    dc945e57be6bdd3cc4894d6cff7dd90a76f6c416

  • SHA256

    95a8370c36d81ea596d83892115ce6b90717396c8f657b17696c7eeb2dba1d2e

  • SHA512

    f54baffc5b545aaa4d939505181466d7b78bb583fd32da6cbf8cea058fca8869e8bf7bf3272f43d09a7b24dc6e821c9aa0e3875dd2959173e704d57568915fa1

Score
10/10
zloadertimtimbotnettrojan

Malware Config

Extracted

Family

zloader

Botnet

tim

Campaign

tim

C2

https://iqowijsdakm.com/gate.php

https://wiewjdmkfjn.com/gate.php

https://dksaoidiakjd.com/gate.php

https://iweuiqjdakjd.com/gate.php

https://yuidskadjna.com/gate.php

https://olksmadnbdj.com/gate.php

https://odsakmdfnbs.com/gate.php

https://odsakjmdnhsaj.com/gate.php

https://odjdnhsaj.com/gate.php

https://odoishsaj.com/gate.php
rc4.plain
rsa_pubkey.plain

Targets

    • Target

      tim.dll

    • Size

      429KB

    • MD5

      75784d297b3d6fb4d434b6890f6334ab

    • SHA1

      dc945e57be6bdd3cc4894d6cff7dd90a76f6c416

    • SHA256

      95a8370c36d81ea596d83892115ce6b90717396c8f657b17696c7eeb2dba1d2e

    • SHA512

      f54baffc5b545aaa4d939505181466d7b78bb583fd32da6cbf8cea058fca8869e8bf7bf3272f43d09a7b24dc6e821c9aa0e3875dd2959173e704d57568915fa1

    Score
    10/10
    zloadertimtimbotnettrojan

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

      trojanbotnetzloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks