Overview

overview

10

Static

static

8a581dba18...bc.dll

windows7_x64

10

8a581dba18...bc.dll

windows10-2004_x64

4

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8a581dba18ce5bc9819c559a8d9fec2591f6417fb563d630d71c23b8a99118bc

  • Size

    561KB

  • Sample

    220205-qf259abheq

  • MD5

    d824c870aa2a02eec9791f97ef1adac9

  • SHA1

    4fbe8ad5dfc4281f2bc78789f6e01aa02a0367bc

  • SHA256

    8a581dba18ce5bc9819c559a8d9fec2591f6417fb563d630d71c23b8a99118bc

  • SHA512

    0c65ba3396b404485c108a1d5a378ebeb36efd77fabac2ad23aa5cd07d2ff48b5cddc691c671955fcff618bf77bf70fae371a50f6e145fe4a4fe69e3ba381722

Score
10/10
zloader08/04botnettrojan

Malware Config

Extracted

Family

zloader

Botnet

08/04

C2

https://kuaxbdkvbbmivbxkrrev.com/wp-config.php

https://hwbblyyrb.pw/wp-config.php
Attributes
  • build_id

    134

rc4.plain

Targets

    • Target

      8a581dba18ce5bc9819c559a8d9fec2591f6417fb563d630d71c23b8a99118bc

    • Size

      561KB

    • MD5

      d824c870aa2a02eec9791f97ef1adac9

    • SHA1

      4fbe8ad5dfc4281f2bc78789f6e01aa02a0367bc

    • SHA256

      8a581dba18ce5bc9819c559a8d9fec2591f6417fb563d630d71c23b8a99118bc

    • SHA512

      0c65ba3396b404485c108a1d5a378ebeb36efd77fabac2ad23aa5cd07d2ff48b5cddc691c671955fcff618bf77bf70fae371a50f6e145fe4a4fe69e3ba381722

    Score
    10/10
    zloader08/04botnettrojan

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

      trojanbotnetzloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks