General

  • Target

    us.dll

  • Size

    3.0MB

  • Sample

    220106-rly68abcf7

  • MD5

    840e7d7e597e033a04f9c281f76d7869

  • SHA1

    ce0c0304bf25cdcbf8998a1ee1ed3c29396fab19

  • SHA256

    b4263deb8ede514bf90b1ffeda7087223e11c80c1494b0662230a0cf9d34aa88

  • SHA512

    a6f6894defefb7487d7f125cf6ff77f418d59a0c831890f25d987c790a42df1f021e2694123865bb5b58243929ac5b62220fada7bc23f154c8fa5c0deb32d4ed

Malware Config

Extracted

Family

zloader

Botnet

9092us

Campaign

9092us

C2

https://asdfghdsajkl.com/gate.php

https://lkjhgfgsdshja.com/gate.php

https://kjdhsasghjds.com/gate.php

https://kdjwhqejqwij.com/gate.php

https://iasudjghnasd.com/gate.php

https://daksjuggdhwa.com/gate.php

https://dkisuaggdjhna.com/gate.php

https://eiqwuggejqw.com/gate.php

https://dquggwjhdmq.com/gate.php

https://djshggadasj.com/gate.php

Attributes
  • build_id

    157

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      us.dll

    • Size

      3.0MB

    • MD5

      840e7d7e597e033a04f9c281f76d7869

    • SHA1

      ce0c0304bf25cdcbf8998a1ee1ed3c29396fab19

    • SHA256

      b4263deb8ede514bf90b1ffeda7087223e11c80c1494b0662230a0cf9d34aa88

    • SHA512

      a6f6894defefb7487d7f125cf6ff77f418d59a0c831890f25d987c790a42df1f021e2694123865bb5b58243929ac5b62220fada7bc23f154c8fa5c0deb32d4ed

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

MITRE ATT&CK Matrix

Tasks