General

  • Target

    us12.23.dll

  • Size

    1.9MB

  • Sample

    220107-lx71lscba6

  • MD5

    1b4eb327a40a14ac4afa627125b63056

  • SHA1

    2c0bc274bc2fd9dab82330b837711355170fc606

  • SHA256

    034f61d86de99210eb32a2dca27a3ad883f54750c46cdec4fcc53050b2f716eb

  • SHA512

    b94770dbf4339677dde0583f0da87bba1fb1c5c0eb028f1697976b24d6298ed43a2d2d1062c8c13a569a3db3032856a37d640a94fe4461986c2d44d1c4c4c819

Malware Config

Extracted

Family

zloader

Botnet

9092us

Campaign

9092us

C2

https://asdfghdsajkl.com/gate.php

https://lkjhgfgsdshja.com/gate.php

https://kjdhsasghjds.com/gate.php

https://kdjwhqejqwij.com/gate.php

https://iasudjghnasd.com/gate.php

https://daksjuggdhwa.com/gate.php

https://dkisuaggdjhna.com/gate.php

https://eiqwuggejqw.com/gate.php

https://dquggwjhdmq.com/gate.php

https://djshggadasj.com/gate.php

Attributes
  • build_id

    157

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      us12.23.dll

    • Size

      1.9MB

    • MD5

      1b4eb327a40a14ac4afa627125b63056

    • SHA1

      2c0bc274bc2fd9dab82330b837711355170fc606

    • SHA256

      034f61d86de99210eb32a2dca27a3ad883f54750c46cdec4fcc53050b2f716eb

    • SHA512

      b94770dbf4339677dde0583f0da87bba1fb1c5c0eb028f1697976b24d6298ed43a2d2d1062c8c13a569a3db3032856a37d640a94fe4461986c2d44d1c4c4c819

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

MITRE ATT&CK Matrix

Tasks