Overview

overview

10

Static

static

787c78e565...2b.exe

windows7_x64

10

787c78e565...2b.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    787c78e5654a6671a8e7f499d5d45a6c04f33a1a0d4b2226752b70da52ea592b

  • Size

    736KB

  • Sample

    220418-fvxh7sbbfn

  • MD5

    5c26254bbde4b83aa81994a0386daf2a

  • SHA1

    4d6a63deaaf17cc6753419dffb33f402714cf83d

  • SHA256

    787c78e5654a6671a8e7f499d5d45a6c04f33a1a0d4b2226752b70da52ea592b

  • SHA512

    865df8fc49ad434ebfa55620944f333a00401905b169b38b21c58ca15af67888f8616241ed37950bd1b217720f33a3fa1ceb9d6b6b0f2c5ed44bfed9223b07e7

Score
10/10
zloadergoogle1google1botnettrojan

Malware Config

Extracted

Family

zloader

Botnet

google1

Campaign

google1

C2

https://eecakesconf.at/web982/gate.php

Attributes
  • build_id

    2

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      787c78e5654a6671a8e7f499d5d45a6c04f33a1a0d4b2226752b70da52ea592b

    • Size

      736KB

    • MD5

      5c26254bbde4b83aa81994a0386daf2a

    • SHA1

      4d6a63deaaf17cc6753419dffb33f402714cf83d

    • SHA256

      787c78e5654a6671a8e7f499d5d45a6c04f33a1a0d4b2226752b70da52ea592b

    • SHA512

      865df8fc49ad434ebfa55620944f333a00401905b169b38b21c58ca15af67888f8616241ed37950bd1b217720f33a3fa1ceb9d6b6b0f2c5ed44bfed9223b07e7

    Score
    10/10
    zloadergoogle1google1botnettrojan

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

      trojanbotnetzloader

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks