zloader | bf0993a3313cbea3ad2edb35657e66574bb88b4a0bd21134a72969b5b8f4be14 | Triage

Sharing

General

Target

bf0993a3313cbea3ad2edb35657e66574bb88b4a0bd21134a72969b5b8f4be14
Size

667KB
Sample

220418-sxt73sdeek
MD5

21b83a88c298e9c0a3b2a3b5e08825e0
SHA1

d34b71691a0cdc8fce8eef97f1c84bfa467a7ac1
SHA256

bf0993a3313cbea3ad2edb35657e66574bb88b4a0bd21134a72969b5b8f4be14
SHA512

34035bca3741a01aacdb026fff43b9160b3dadb67b2ff82646c5c6e930a39b9120b90940e0c64c9947489bb81830230c609e99d04788b71ca4f7c7120ecc0c0c

Score

10^/10

zloader dll26 dll26 botnet trojan

Malware Config

Extracted

Family

zloader

Botnet

dll26

Campaign

dll26

C2

https://eecakesconf.at/web982/gate.php

Attributes

build_id
7

rc4.plain

rsa_pubkey.plain

Targets

- Target
  
  bf0993a3313cbea3ad2edb35657e66574bb88b4a0bd21134a72969b5b8f4be14
- Size
  
  667KB
- MD5
  
  21b83a88c298e9c0a3b2a3b5e08825e0
- SHA1
  
  d34b71691a0cdc8fce8eef97f1c84bfa467a7ac1
- SHA256
  
  bf0993a3313cbea3ad2edb35657e66574bb88b4a0bd21134a72969b5b8f4be14
- SHA512
  
  34035bca3741a01aacdb026fff43b9160b3dadb67b2ff82646c5c6e930a39b9120b90940e0c64c9947489bb81830230c609e99d04788b71ca4f7c7120ecc0c0c
Score

10^/10

zloader dll26 dll26 botnet trojan
- Zloader, Terdot, DELoader, ZeusSphinx
  Zloader is a malware strain that was initially discovered back in August 2015.
  trojan botnet zloader
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

zloaderdll26dll26botnettrojan