Overview

overview

10

Static

static

795268d44a...b8.dll

windows7_x64

1

795268d44a...b8.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    795268d44a8c63129e72dcc0a832bfd20526745c5dc3bfda17eacbd19acc85b8

  • Size

    277KB

  • Sample

    220419-epd91aeeh7

  • MD5

    483dba96a462faa4a9023caa518b0ee4

  • SHA1

    cafb62e91fd58cf4b6d3b5a5bcd41cf89165cc32

  • SHA256

    795268d44a8c63129e72dcc0a832bfd20526745c5dc3bfda17eacbd19acc85b8

  • SHA512

    a20ffd1ad4eef318528efdbc54042fc250ac67e5b59540e916ec6abd902cad0673d055223cb54fea2a35a6db5063381720f0325c5adb7a93df3d9f8f9c55e220

Score
10/10
zloadernut30/10botnettrojan

Malware Config

Extracted

Family

zloader

Botnet

nut

Campaign

30/10

C2

https://creditoacumuladoicms.com.br/npnegt.php

https://morgadoent.co.za/fp3jsl.php

https://access-one.us/clkgmw.php

https://amazonuniverse.in/dgxcee.php

https://ntandingsundhosmala.tk/wp-smarts.php
Attributes
  • build_id

    188

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      795268d44a8c63129e72dcc0a832bfd20526745c5dc3bfda17eacbd19acc85b8

    • Size

      277KB

    • MD5

      483dba96a462faa4a9023caa518b0ee4

    • SHA1

      cafb62e91fd58cf4b6d3b5a5bcd41cf89165cc32

    • SHA256

      795268d44a8c63129e72dcc0a832bfd20526745c5dc3bfda17eacbd19acc85b8

    • SHA512

      a20ffd1ad4eef318528efdbc54042fc250ac67e5b59540e916ec6abd902cad0673d055223cb54fea2a35a6db5063381720f0325c5adb7a93df3d9f8f9c55e220

    Score
    10/10
    zloadernut30/10botnettrojan

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

      trojanbotnetzloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks