General

  • Target

    c58d97e033d7b568ce4261959e5e04a5b1f8849ccf4f717bcac79ca728d07ace

  • Size

    445KB

  • Sample

    220418-sxsz1sdedr

  • MD5

    62b048529ddc7e871a9807068ee5cacd

  • SHA1

    1aef66bb26dad4ba2fd182f01efd13e44e4bfe31

  • SHA256

    c58d97e033d7b568ce4261959e5e04a5b1f8849ccf4f717bcac79ca728d07ace

  • SHA512

    74b64e2d78bdec8c82835c5ac7501c3a18a9ad1e25da959bfa08df77fec96ad0a6e61277c2ec4ffadf329961614d5f9f3d012351211782a9ff146fcecc9b1f04

Malware Config

Extracted

Family

zloader

Botnet

target1

Campaign

target1

C2

https://notsweets.net/LKhwojehDgwegSDG/gateJKjdsh.php

https://olpons.com/LKhwojehDgwegSDG/gateJKjdsh.php

https://karamelliar.org/LKhwojehDgwegSDG/gateJKjdsh.php

https://dogrunn.com/LKhwojehDgwegSDG/gateJKjdsh.php

https://azoraz.net/LKhwojehDgwegSDG/gateJKjdsh.php

Attributes
  • build_id

    133

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      c58d97e033d7b568ce4261959e5e04a5b1f8849ccf4f717bcac79ca728d07ace

    • Size

      445KB

    • MD5

      62b048529ddc7e871a9807068ee5cacd

    • SHA1

      1aef66bb26dad4ba2fd182f01efd13e44e4bfe31

    • SHA256

      c58d97e033d7b568ce4261959e5e04a5b1f8849ccf4f717bcac79ca728d07ace

    • SHA512

      74b64e2d78bdec8c82835c5ac7501c3a18a9ad1e25da959bfa08df77fec96ad0a6e61277c2ec4ffadf329961614d5f9f3d012351211782a9ff146fcecc9b1f04

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

MITRE ATT&CK Matrix

Tasks