Resubmissions

04-11-2021 18:29

211104-w4y2dshce3 10

14-10-2021 11:20

211014-nfswgaghek 10

General

  • Target

    keaqxieb.dll

  • Size

    412KB

  • Sample

    211104-w4y2dshce3

  • MD5

    d11eba83d05fe0789e5885558680b31b

  • SHA1

    ebca52bcd828cc94a443b0565670f28de52e93db

  • SHA256

    24ee365c548cb76e0b5a021e0ebaade9f95f9f5a26e4e4b96be5b238eb8f1f5b

  • SHA512

    c125bb8a48464d1e6f3439742d577e1c56ba421e3d8657145bd75baa5a3d725a252e74cf4da97c2a20a6a4e928883943cdc62b95ac25ae9217eed09e9de4b260

Malware Config

Extracted

Family

zloader

Botnet

october

Campaign

october

C2

http://sept9stuff10.com/web/post.php

http://sept9stuff11.com/web/post.php

Attributes
  • build_id

    54

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      keaqxieb.dll

    • Size

      412KB

    • MD5

      d11eba83d05fe0789e5885558680b31b

    • SHA1

      ebca52bcd828cc94a443b0565670f28de52e93db

    • SHA256

      24ee365c548cb76e0b5a021e0ebaade9f95f9f5a26e4e4b96be5b238eb8f1f5b

    • SHA512

      c125bb8a48464d1e6f3439742d577e1c56ba421e3d8657145bd75baa5a3d725a252e74cf4da97c2a20a6a4e928883943cdc62b95ac25ae9217eed09e9de4b260

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

MITRE ATT&CK Matrix

Tasks