zloader | e9433149cd79c0aa084ca1fbdada510218d324d65079061932ad9610af5fb8d6

Analysis

max time kernel
161s
max time network
189s
platform
windows10-2004_x64
resource
win10v2004-20220310-en
submitted
24-03-2022 13:39

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

e9433149cd79c0aa084ca1fbdada510218d324d65079061932ad9610af5fb8d6.exe
Size

176KB
MD5

da841127a0e591487c85677e79ee3913
SHA1

16e7c6fee646e92e04b1db8584163985ce469964
SHA256

e9433149cd79c0aa084ca1fbdada510218d324d65079061932ad9610af5fb8d6
SHA512

118555dd7b3e2545953a4e8851e095839140c92aeeaa8576cf4b3f9da789ad2c0fd65eef72720fd4fde692740fc6ff578e3d5ef34c60a2c659bbd03376447ceb

Score

10^/10

zloader canadaloads nerino botnet trojan

Malware Config

Extracted

Family

zloader

Botnet

CanadaLoads

Campaign

Nerino

https://makemoneywithforexxs.com/bFnF0y1r/7QKpXmV3Pz.php

https://monanuslanus.com/bFnF0y1r/7QKpXmV3Pz.php

https://lericastrongs.com/bFnF0y1r/7QKpXmV3Pz.php

https://hyllionsudks.com/bFnF0y1r/7QKpXmV3Pz.php

https://crimewasddef.com/bFnF0y1r/7QKpXmV3Pz.php

https://derekdsingel.com/bFnF0y1r/7QKpXmV3Pz.php

https://simplereffiret.com/bFnF0y1r/7QKpXmV3Pz.php

https://regeerscomba.com/bFnF0y1r/7QKpXmV3Pz.php

Attributes

build_id
75

rc4.plain

rsa_pubkey.plain

Signatures

Zloader, Terdot, DELoader, ZeusSphinx
Zloader is a malware strain that was initially discovered back in August 2015.
trojan botnet zloader

C:\Users\Admin\AppData\Local\Temp\e9433149cd79c0aa084ca1fbdada510218d324d65079061932ad9610af5fb8d6.exe
"C:\Users\Admin\AppData\Local\Temp\e9433149cd79c0aa084ca1fbdada510218d324d65079061932ad9610af5fb8d6.exe"
1⤵
PID:1204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1204-134-0x00000000005A8000-0x00000000005BF000-memory.dmp

Filesize
92KB

Download
memory/1204-135-0x00000000005A8000-0x00000000005BF000-memory.dmp

Filesize
92KB

Download
memory/1204-136-0x0000000002240000-0x0000000002262000-memory.dmp

Filesize
136KB

Download
memory/1204-137-0x0000000000400000-0x00000000004E6000-memory.dmp

Filesize
920KB

Download