Overview

overview

10

Static

static

9

98bff67b26...17.dll

windows7_x64

1

98bff67b26...17.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    98bff67b26daf42bc09a7579d8f08ad88a83cdaafed1bc5c7bea8519af3c9817

  • Size

    615KB

  • Sample

    220524-vazv6adgcr

  • MD5

    a5aaec8e6bc64b8166195cc890408686

  • SHA1

    2e0fdf9a5c5ff3833fdcd82e087da7d28252f36a

  • SHA256

    98bff67b26daf42bc09a7579d8f08ad88a83cdaafed1bc5c7bea8519af3c9817

  • SHA512

    ecbb66caf24e84f8a6d584429d2c3526e373902a85f42e795dc4d61d848f53113c7d8c3ceba8f871a2160a51ef80404d19279bb1ed93ffefcff0e0469155f836

Score
10/10
zloaderspx138spx138botnetcryptonepackertrojan

Malware Config

Extracted

Family

zloader

Botnet

spx138

Campaign

spx138

C2

https://xeemoquo.top/treusparq.php

https://leeephee.top/treusparq.php

https://withifceale.top/treusparq.php

https://wpsnoum.pw/treusparq.php

https://wsaexdig.pw/treusparq.php
Attributes
  • build_id

    10

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      98bff67b26daf42bc09a7579d8f08ad88a83cdaafed1bc5c7bea8519af3c9817

    • Size

      615KB

    • MD5

      a5aaec8e6bc64b8166195cc890408686

    • SHA1

      2e0fdf9a5c5ff3833fdcd82e087da7d28252f36a

    • SHA256

      98bff67b26daf42bc09a7579d8f08ad88a83cdaafed1bc5c7bea8519af3c9817

    • SHA512

      ecbb66caf24e84f8a6d584429d2c3526e373902a85f42e795dc4d61d848f53113c7d8c3ceba8f871a2160a51ef80404d19279bb1ed93ffefcff0e0469155f836

    Score
    10/10
    zloaderspx138spx138botnettrojan

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

      trojanbotnetzloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks