Analysis
-
max time kernel
82s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
18-04-2022 05:12
General
-
Target
1907a0cc44810a9ddcdcd3701c390d036feedbc55a812e797add53a7c935e178.exe
-
Size
2.0MB
-
MD5
b5843ad453d4b6e360b939c5d348d0b2
-
SHA1
511b7849dfbca06c951001f8f3e958806fd4acfa
-
SHA256
1907a0cc44810a9ddcdcd3701c390d036feedbc55a812e797add53a7c935e178
-
SHA512
0eeeb1f0e88fb66f0d44e836ae8e9d7eebcb039397abe4ce331071d8077a7e84e4286e432c80a39502cd46548a1ce973eff195de2325d298ecb1980bcbf77ef2
Malware Config
Extracted
zloader
ELDO
ELDO
https://notsweets.net/LKhwojehDgwegSDG/gateJKjdsh.php
https://olpons.com/LKhwojehDgwegSDG/gateJKjdsh.php
https://karamelliar.org/LKhwojehDgwegSDG/gateJKjdsh.php
https://dogrunn.com/LKhwojehDgwegSDG/gateJKjdsh.php
https://azoraz.net/LKhwojehDgwegSDG/gateJKjdsh.php
-
build_id
132
Signatures
-
Zloader, Terdot, DELoader, ZeusSphinx
Zloader is a malware strain that was initially discovered back in August 2015.
Processes
-
C:\Users\Admin\AppData\Local\Temp\1907a0cc44810a9ddcdcd3701c390d036feedbc55a812e797add53a7c935e178.exe"C:\Users\Admin\AppData\Local\Temp\1907a0cc44810a9ddcdcd3701c390d036feedbc55a812e797add53a7c935e178.exe"1⤵
-
C:\Windows\SysWOW64\msiexec.exemsiexec.exe1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
152KB
-
Filesize
3.0MB
-
Filesize
3.0MB
-
Filesize
152KB
-
Filesize
4KB
-
Filesize
152KB
-
-
Filesize
152KB