General
-
Target
725e1b82b882d693028f13e3a082a8a9f278b79ad5ade994ccc9414b4e46d32c
-
Size
238KB
-
Sample
220201-l5qfjacfak
-
MD5
3078272737e5983ba6d5d6a2abccdb5e
-
SHA1
833ed71fc83dae030e43510ee37446803624bb79
-
SHA256
725e1b82b882d693028f13e3a082a8a9f278b79ad5ade994ccc9414b4e46d32c
-
SHA512
d182329cee7cdc9b421bb4c05848b6fcf75f8147ca7ab639a1b94f943a5964f89d546decaf48e917318f2524bc86d2419c1c612a22c10284e576c40189f146de
Static task
static1
Behavioral task
behavioral1
Sample
725e1b82b882d693028f13e3a082a8a9f278b79ad5ade994ccc9414b4e46d32c.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
725e1b82b882d693028f13e3a082a8a9f278b79ad5ade994ccc9414b4e46d32c.dll
Resource
win10v2004-en-20220113
Malware Config
Extracted
zloader
DLLobnova
prodomains
https://dsdjfhdsufudhjas.pro/gate.php
https://dsdjfhd9ddksaas.pro/gate.php
https://dsdjfhdsufudhjas.name/gate.php
https://dsdjfhd9ddksaas.com/gate.php
https://dsdjfhdsufudhjas.pw/gate.php
https://dsdjfhd9ddksaas.ru/gate.php
https://dsdjfhdsufudhjas.su/gate.php
https://kdsadisadijdsasm2.com/gate.php
https://dsdjfhdsufudhjas.net/gate.php
https://dsdjfhd9ddksaas.eu/gate.php
-
build_id
28
Targets
-
-
Target
725e1b82b882d693028f13e3a082a8a9f278b79ad5ade994ccc9414b4e46d32c
-
Size
238KB
-
MD5
3078272737e5983ba6d5d6a2abccdb5e
-
SHA1
833ed71fc83dae030e43510ee37446803624bb79
-
SHA256
725e1b82b882d693028f13e3a082a8a9f278b79ad5ade994ccc9414b4e46d32c
-
SHA512
d182329cee7cdc9b421bb4c05848b6fcf75f8147ca7ab639a1b94f943a5964f89d546decaf48e917318f2524bc86d2419c1c612a22c10284e576c40189f146de
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-