Overview

overview

10

Static

static

a47685b867...47.dll

windows7_x64

10

a47685b867...47.dll

windows10-2004_x64

4

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a47685b867e6b164a812a05f35b6732c9b81f1fc75b2a7242c18436a9329d247

  • Size

    456KB

  • Sample

    220205-n33n7abaf6

  • MD5

    d2d259229212aed1a346b8e0187b7d92

  • SHA1

    84ef96d8c3257db85d7358d50ccbfa3ca5d70828

  • SHA256

    a47685b867e6b164a812a05f35b6732c9b81f1fc75b2a7242c18436a9329d247

  • SHA512

    a1ff26f415f94c331d2c70c54c6b53a5ea5c07f996828733ff9fa3eb04c68d41094152377a2051a7411950ccd48ddfb05364c740ba6fde4edba778f7e10d6ea5

Score
10/10
zloader14/04botnettrojan

Malware Config

Extracted

Family

zloader

Botnet

14/04

C2

https://gdexordsb.icu/wp-config.php

https://msrtuhctb.pw/wp-config.php
Attributes
  • build_id

    148

rc4.plain

Targets

    • Target

      a47685b867e6b164a812a05f35b6732c9b81f1fc75b2a7242c18436a9329d247

    • Size

      456KB

    • MD5

      d2d259229212aed1a346b8e0187b7d92

    • SHA1

      84ef96d8c3257db85d7358d50ccbfa3ca5d70828

    • SHA256

      a47685b867e6b164a812a05f35b6732c9b81f1fc75b2a7242c18436a9329d247

    • SHA512

      a1ff26f415f94c331d2c70c54c6b53a5ea5c07f996828733ff9fa3eb04c68d41094152377a2051a7411950ccd48ddfb05364c740ba6fde4edba778f7e10d6ea5

    Score
    10/10
    zloader14/04botnettrojan

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

      trojanbotnetzloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks