Overview

overview

10

Static

static

10

648545a9d8...96.dll

windows7_x64

10

648545a9d8...96.dll

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    648545a9d8d6a009c81d0fc072e430a91cd2d7cc63c771fb7a88e59de7af5296
  • Size 156KB
  • Sample220520-p9fcxafgar
  • SHA256 648545a9d8d6a009c81d0fc072e430a91cd2d7cc63c771fb7a88e59de7af5296
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
nut14/08zloader

Malware Config

Extracted

Family

  • zloader

Botnet

  • nut

Campaign

  • 14/08

C2

  • https://girldowcahohorme.tk/wp-parsing.php

  • http://thegamegolfmagazine.com/wp-parsing.php

  • http://truvaluconsulting.com/wp-parsing.php

  • https://blog2.textbookrush.com/wp-parsing.php

  • https://curiosidadez.com.br/wp-parsing.php

  • https://nonchothetohear.cf/wp-parsing.php

  • https://sicupira8.com.br/wp-parsing.php

  • https://titaniumgamers.com/wp-parsing.php

Attributes
  • build_id

    109

rc4.plain
rsa_pubkey.plain

Signatures

File Explorer

  • 648545a9d8d6a009c81d0fc072e430a91cd2d7cc63c771fb7a88e59de7af5296
    .dll 156KB

648545a9d8d6a009c81d0fc072e430a91cd2d7cc63c771fb7a88e59de7af5296

  • IMPHASH dc6bb9ad515f0c6d66b3c1eefe606d5f
  • SHA256 648545a9d8d6a009c81d0fc072e430a91cd2d7cc63c771fb7a88e59de7af5296
  • MD5 SHA1 SHA512 SSDEEP
regsvr32windowsx86
Minor OS version
Major OS version
Entry point
14864
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths