Overview

overview

10

Static

static

3ef112a50f...d6.dll

windows7_x64

10

3ef112a50f...d6.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ef112a50f77507aeae019061f763ac51fcca1177759ef18f31bbb42bc633bd6

  • Size

    269KB

  • Sample

    220417-r617bagden

  • MD5

    93f753348d597c11766bbec6543e95a5

  • SHA1

    128dbeb3464799d9ac4873a40c067691b9fb06e5

  • SHA256

    3ef112a50f77507aeae019061f763ac51fcca1177759ef18f31bbb42bc633bd6

  • SHA512

    e5df0a6513bc1b4201cd54e3d6ab12ad80724e0918ede61c9f070ae8b5b86bddd691bf053404c44deef132adc049272136233190711bf65c353b3dbbe02d06ba

Score
10/10
zloaderkev15/10botnettrojan

Malware Config

Extracted

Family

zloader

Botnet

kev

Campaign

15/10

C2

https://combotraining.fr/wpdrxl.php

https://jokilink.com/4wjgxc.php

https://latinosconstruction.com/adfuon.php

https://liciousbbl.com/vuadtm.php

https://kingbhavthanbetepos.tk/wp-smarts.php

https://piksellat.com/tcsrog.php
Attributes
  • build_id

    169

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      3ef112a50f77507aeae019061f763ac51fcca1177759ef18f31bbb42bc633bd6

    • Size

      269KB

    • MD5

      93f753348d597c11766bbec6543e95a5

    • SHA1

      128dbeb3464799d9ac4873a40c067691b9fb06e5

    • SHA256

      3ef112a50f77507aeae019061f763ac51fcca1177759ef18f31bbb42bc633bd6

    • SHA512

      e5df0a6513bc1b4201cd54e3d6ab12ad80724e0918ede61c9f070ae8b5b86bddd691bf053404c44deef132adc049272136233190711bf65c353b3dbbe02d06ba

    Score
    10/10
    zloaderkev15/10botnettrojan

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

      trojanbotnetzloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks