Overview

overview

10

Static

static

entomology.srt.dll

windows7_x64

10

entomology.srt.dll

windows10_x64

10

Resubmissions

21-11-2021 21:30

211121-1cx28shde8 10

24-06-2020 14:56

200624-kkaldd3t8x 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    entomology.srt

  • Size

    225KB

  • Sample

    211121-1cx28shde8

  • MD5

    96874e8ec64976899a1f7b90022f3e43

  • SHA1

    ab33331de0ab0f9dddb2b8eb8e4e8c92b18a9c61

  • SHA256

    badc87166cc28491dcae0164e7dc027aeb4b98eea5f765f776f58d8683cdec6a

  • SHA512

    4e8bccc9fe9d507817f78950388a8726f95a5aafd9a9e192ef9e33871a67cb9d44ff56c4a0c03490c30e2d272ca08ba3819992bc21d810bc3885ac7f4cf5b63b

Score
10/10
zloadermain2020-06-12botnettrojan

Malware Config

Extracted

Family

zloader

Botnet

main

Campaign

2020-06-12

C2

https://matarlod.org/web/data

https://datearoc.org/web/data

https://rechnecy.org/web/data

https://ramissal.org/web/data

https://raidesci.org/web/data

https://glartrot.org/web/data

https://revenapo.org/web/data

https://brenonip.org/web/data
Attributes
  • build_id

    6

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      entomology.srt

    • Size

      225KB

    • MD5

      96874e8ec64976899a1f7b90022f3e43

    • SHA1

      ab33331de0ab0f9dddb2b8eb8e4e8c92b18a9c61

    • SHA256

      badc87166cc28491dcae0164e7dc027aeb4b98eea5f765f776f58d8683cdec6a

    • SHA512

      4e8bccc9fe9d507817f78950388a8726f95a5aafd9a9e192ef9e33871a67cb9d44ff56c4a0c03490c30e2d272ca08ba3819992bc21d810bc3885ac7f4cf5b63b

    Score
    10/10
    zloadermain2020-06-12botnettrojan

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

      trojanbotnetzloader

    • Zloader Payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks