Overview

overview

10

Static

static

b7824362ca...01.dll

windows7_x64

10

b7824362ca...01.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b7824362cae4aa551d8dc5853928f4d7bae5cbddf72c00776f740abfab8b0401

  • Size

    300KB

  • Sample

    220502-s14kxsager

  • MD5

    5f92662f99a4c56c1ea0f682369716da

  • SHA1

    3d44ed670a81ed475e8399a787a7c05b3b2fb397

  • SHA256

    b7824362cae4aa551d8dc5853928f4d7bae5cbddf72c00776f740abfab8b0401

  • SHA512

    766cc3792d8c3993167e445f655a9f49d11bf38581eac50017ac635b46abc740450fb375bc1fa4c6b828b61e982c32f525adbda5a8f33b4efa04b2949b93a0aa

Score
10/10
zloadernut09/10botnettrojan

Malware Config

Extracted

Family

zloader

Botnet

nut

Campaign

09/10

C2

https://1stsecuritysolutions.co.uk/17vfj3.php

https://aplusevents.com.au/elxbmr.php

https://autoescolatopsul.com.br/zsog59.php

https://avecla.es/d3k34t.php

https://triccirohepe.tk/wp-smarts.php

https://botchicoffee.com/fmsbdt.php

https://buddingreport.com/yxewxx.php
Attributes
  • build_id

    163

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      b7824362cae4aa551d8dc5853928f4d7bae5cbddf72c00776f740abfab8b0401

    • Size

      300KB

    • MD5

      5f92662f99a4c56c1ea0f682369716da

    • SHA1

      3d44ed670a81ed475e8399a787a7c05b3b2fb397

    • SHA256

      b7824362cae4aa551d8dc5853928f4d7bae5cbddf72c00776f740abfab8b0401

    • SHA512

      766cc3792d8c3993167e445f655a9f49d11bf38581eac50017ac635b46abc740450fb375bc1fa4c6b828b61e982c32f525adbda5a8f33b4efa04b2949b93a0aa

    Score
    10/10
    zloadernut09/10botnettrojan

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

      trojanbotnetzloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks