General

  • Target

    A25D33F3F8C2DA6DC35A64B16229D5F0692FB5C5

  • Size

    814KB

  • Sample

    220111-mtfmmafcc8

  • MD5

    97de56e1708e4f34d65663d127fb8857

  • SHA1

    a25d33f3f8c2da6dc35a64b16229d5f0692fb5c5

  • SHA256

    9b2e896b50b8658a5ff602db0913e50cb9fa2c6dd13f103a5f10f8d1b2021e68

  • SHA512

    4cdf3aee57a633b81860c5343e27aae77a087acee60b215939aeade815cdb0714ca8bcdd81f74f946d773c54e015e4eef727bacf8cce8cc7caf8d1cbc519b1d7

Malware Config

Extracted

Family

zloader

Botnet

9092us

Campaign

9092us

C2

https://asdfghdsajkl.com/gate.php

https://lkjhgfgsdshja.com/gate.php

https://kjdhsasghjds.com/gate.php

https://kdjwhqejqwij.com/gate.php

https://iasudjghnasd.com/gate.php

https://daksjuggdhwa.com/gate.php

https://dkisuaggdjhna.com/gate.php

https://eiqwuggejqw.com/gate.php

https://dquggwjhdmq.com/gate.php

https://djshggadasj.com/gate.php

Attributes
  • build_id

    157

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      A25D33F3F8C2DA6DC35A64B16229D5F0692FB5C5

    • Size

      814KB

    • MD5

      97de56e1708e4f34d65663d127fb8857

    • SHA1

      a25d33f3f8c2da6dc35a64b16229d5f0692fb5c5

    • SHA256

      9b2e896b50b8658a5ff602db0913e50cb9fa2c6dd13f103a5f10f8d1b2021e68

    • SHA512

      4cdf3aee57a633b81860c5343e27aae77a087acee60b215939aeade815cdb0714ca8bcdd81f74f946d773c54e015e4eef727bacf8cce8cc7caf8d1cbc519b1d7

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

MITRE ATT&CK Matrix

Tasks