General

  • Target

    a136ba9a5582e0f317934712213eb7bd3758fad92750e02218e29671bda99957

  • Size

    667KB

  • Sample

    220418-sxxm7sghc5

  • MD5

    be4aefb22447f242df181e65db380687

  • SHA1

    39699d67309a9b8817707a69a915ca0a0a57c607

  • SHA256

    a136ba9a5582e0f317934712213eb7bd3758fad92750e02218e29671bda99957

  • SHA512

    fe1c3667ad73732c27bc48a3a7a64a7ec25e8c0bdc057131e73cacfb01dff5828b507d91b1257f2aa09b6b2cb911ff53b6d5d29e50b32c6ef8c7bfac4eb96029

Malware Config

Extracted

Family

zloader

Botnet

dll26

Campaign

dll26

C2

https://eecakesconf.at/web982/gate.php

Attributes
  • build_id

    7

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      a136ba9a5582e0f317934712213eb7bd3758fad92750e02218e29671bda99957

    • Size

      667KB

    • MD5

      be4aefb22447f242df181e65db380687

    • SHA1

      39699d67309a9b8817707a69a915ca0a0a57c607

    • SHA256

      a136ba9a5582e0f317934712213eb7bd3758fad92750e02218e29671bda99957

    • SHA512

      fe1c3667ad73732c27bc48a3a7a64a7ec25e8c0bdc057131e73cacfb01dff5828b507d91b1257f2aa09b6b2cb911ff53b6d5d29e50b32c6ef8c7bfac4eb96029

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

MITRE ATT&CK Matrix

Tasks