zloader | 69c4f37bac324873c0caea8194b91f9ee804cef77ee21bdb2f8f35e5c884878c | Triage

Resubmissions

04-12-2023 13:00

231204-p8vffabc2s 10

18-04-2022 15:30

220418-sxy62adeen 10

Sharing

General

Target

69c4f37bac324873c0caea8194b91f9ee804cef77ee21bdb2f8f35e5c884878c
Size

667KB
Sample

220418-sxy62adeen
MD5

14329d9e980e7a427e941f7d5d71365c
SHA1

07ede188c7e143443eb8fcd9dfa347481b34fcc2
SHA256

69c4f37bac324873c0caea8194b91f9ee804cef77ee21bdb2f8f35e5c884878c
SHA512

6fa538242f02dbf469a9c9ea4ddbdaa628001796b367106d711cb5a38c507badf04194d85f5c3e277ff0742c2bf1873b8e3c68afd9ade8b998ec7c7c442c8e33

Score

10^/10

zloader dll26 dll26 botnet trojan

Malware Config

Extracted

Family

zloader

Botnet

dll26

Campaign

dll26

C2

https://eecakesconf.at/web982/gate.php

Attributes

build_id
7

rc4.plain

rsa_pubkey.plain

Targets

- Target
  
  69c4f37bac324873c0caea8194b91f9ee804cef77ee21bdb2f8f35e5c884878c
- Size
  
  667KB
- MD5
  
  14329d9e980e7a427e941f7d5d71365c
- SHA1
  
  07ede188c7e143443eb8fcd9dfa347481b34fcc2
- SHA256
  
  69c4f37bac324873c0caea8194b91f9ee804cef77ee21bdb2f8f35e5c884878c
- SHA512
  
  6fa538242f02dbf469a9c9ea4ddbdaa628001796b367106d711cb5a38c507badf04194d85f5c3e277ff0742c2bf1873b8e3c68afd9ade8b998ec7c7c442c8e33
Score

10^/10

zloader dll26 dll26 botnet trojan
- Zloader, Terdot, DELoader, ZeusSphinx
  Zloader is a malware strain that was initially discovered back in August 2015.
  trojan botnet zloader
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

zloaderdll26dll26botnettrojan