zloader | 6576da1f0d0e8c2d7457c2898d0b8d2d7ad40527c60473910f86da6cf39c0951

General

Target

6576da1f0d0e8c2d7457c2898d0b8d2d7ad40527c60473910f86da6cf39c0951
Size

826KB
Sample

220205-salbnacfhq
MD5

9d32cc86f7791185dec921fbc7b3be78
SHA1

65764ac0f8cd50d3c0e2d74f789e702a6353c26c
SHA256

6576da1f0d0e8c2d7457c2898d0b8d2d7ad40527c60473910f86da6cf39c0951
SHA512

02c2fcd635c87e40161fe83648589281a38e890bdb0e416c301dd8222e26d01792030c3c1d1620af986e45fb822ad08571d571294ba3b3d0e5de4afc9ad33ff7

Score

10^/10

Malware Config

Extracted

Family

zloader

Botnet

main

Campaign

26.04.2020

C2

https://coult.org/sound.php

https://chorbly.org/sound.php

https://kodray.org/sound.php

https://retualeigh.com/sound.php

https://grually.com/sound.php

https://footmess.com/sound.php

https://rarigussa.com/sound.php

https://pacallse.com/sound.php

Attributes

build_id
47

rc4.plain

Targets

- Target
  
  6576da1f0d0e8c2d7457c2898d0b8d2d7ad40527c60473910f86da6cf39c0951
- Size
  
  826KB
- MD5
  
  9d32cc86f7791185dec921fbc7b3be78
- SHA1
  
  65764ac0f8cd50d3c0e2d74f789e702a6353c26c
- SHA256
  
  6576da1f0d0e8c2d7457c2898d0b8d2d7ad40527c60473910f86da6cf39c0951
- SHA512
  
  02c2fcd635c87e40161fe83648589281a38e890bdb0e416c301dd8222e26d01792030c3c1d1620af986e45fb822ad08571d571294ba3b3d0e5de4afc9ad33ff7
Score

10^/10

zloader main 26.04.2020 botnet trojan
- Zloader, Terdot, DELoader, ZeusSphinx
  Zloader is a malware strain that was initially discovered back in August 2015.
  trojan botnet zloader
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

1

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Zloader, Terdot, DELoader, ZeusSphinx

MITRE ATT&CK Matrix ATT&CK v6

Tasks

static1

behavioral1

behavioral2