Overview

overview

10

Static

static

10

648545a9d8...96.dll

windows7_x64

10

648545a9d8...96.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    648545a9d8d6a009c81d0fc072e430a91cd2d7cc63c771fb7a88e59de7af5296

  • Size

    156KB

  • MD5

    0e2a67089d12bf0bfb06f54ab52369d6

  • SHA1

    57ff02529e54b54bd4e5d51ccb28eae041163ebf

  • SHA256

    648545a9d8d6a009c81d0fc072e430a91cd2d7cc63c771fb7a88e59de7af5296

  • SHA512

    416de0aa9061dbed9e11cdb077f6a81bb45c15ed07e6be1d3df12561e0c47e23daaf4fa1e4d999f22354dac300c3add4300efb2a58b60b935cbab06811b0b357

  • SSDEEP

    3072:V9mVUDJBy5QVXLxGlUh355or+xneeMFRaWX7GYc8f5:32UDJBlx3hfLxnVMn7LGA

Score
10/10
nut14/08zloader

Malware Config

Extracted

Family

zloader

Botnet

nut

Campaign

14/08

C2

https://girldowcahohorme.tk/wp-parsing.php

http://thegamegolfmagazine.com/wp-parsing.php

http://truvaluconsulting.com/wp-parsing.php

https://blog2.textbookrush.com/wp-parsing.php

https://curiosidadez.com.br/wp-parsing.php

https://nonchothetohear.cf/wp-parsing.php

https://sicupira8.com.br/wp-parsing.php

https://titaniumgamers.com/wp-parsing.php
Attributes
  • build_id

    109

rc4.plain
rsa_pubkey.plain

Signatures

Files

  • 648545a9d8d6a009c81d0fc072e430a91cd2d7cc63c771fb7a88e59de7af5296
    .dll regsvr32 windows x86

    dc6bb9ad515f0c6d66b3c1eefe606d5f


    Headers

    Imports

    Exports

    Sections