General
-
Target
3b4b2c5c8a00fab59684fee37b54912c58682022e2dc4e3dcd24b6e58533ecd9
-
Size
421KB
-
Sample
220205-t7syfadda8
-
MD5
061506b2a0a26fbd20dba69a1105e1b7
-
SHA1
a4f4bc27be3da2b85a06883615bb96b8a2a79ebb
-
SHA256
3b4b2c5c8a00fab59684fee37b54912c58682022e2dc4e3dcd24b6e58533ecd9
-
SHA512
4426c072cb52f2e4ce35ca88c4f20304145d017b5e95f2d35aa68216691b6abde99b6941e1067e50b77342300dea329cb0facbc5ab391272ced658dcf5ee2be9
Static task
static1
Behavioral task
behavioral1
Sample
3b4b2c5c8a00fab59684fee37b54912c58682022e2dc4e3dcd24b6e58533ecd9.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
3b4b2c5c8a00fab59684fee37b54912c58682022e2dc4e3dcd24b6e58533ecd9.dll
Resource
win10v2004-en-20220113
Malware Config
Extracted
zloader
April23Fixed
April23Fixed
http://wmwifbajxxbcxmucxmlc.com/post.php
http://onfovdaqqrwbvdfoqnof.com/post.php
http://cmmxhurildiigqghlryq.com/post.php
http://nmqsmbiabjdnuushksas.com/post.php
http://fvqlkgedqjiqgapudkgq.com/post.php
http://iawfqecrwohcxnhwtofa.com/post.php
http://nlbmfsyplohyaicmxhum.com/post.php
http://snnmnkxdhflwgthqismb.com/post.php
-
build_id
120
Targets
-
-
Target
3b4b2c5c8a00fab59684fee37b54912c58682022e2dc4e3dcd24b6e58533ecd9
-
Size
421KB
-
MD5
061506b2a0a26fbd20dba69a1105e1b7
-
SHA1
a4f4bc27be3da2b85a06883615bb96b8a2a79ebb
-
SHA256
3b4b2c5c8a00fab59684fee37b54912c58682022e2dc4e3dcd24b6e58533ecd9
-
SHA512
4426c072cb52f2e4ce35ca88c4f20304145d017b5e95f2d35aa68216691b6abde99b6941e1067e50b77342300dea329cb0facbc5ab391272ced658dcf5ee2be9
Score10/10-
Blocklisted process makes network request
-
Suspicious use of SetThreadContext
-