General

  • Target

    2c599903042c465b6711805474f55548adc42c70634a7a1665d8cab874fdac35

  • Size

    300KB

  • Sample

    230129-znmvzaea2y

  • MD5

    1b7222bcb47d6ac7432f0ec61642b952

  • SHA1

    3b9c2d45fd7813aecd6b40fba0eff184077f7022

  • SHA256

    2c599903042c465b6711805474f55548adc42c70634a7a1665d8cab874fdac35

  • SHA512

    7e858c83c56abb8747a8ceb2a97019f40af8b26ae417ac0a08711e93ddc186126bcfea684a5a27f1e06c1d016302788adc6ea0c655b844e3557698d1b924e77f

  • SSDEEP

    3072:JdiOeks5zUuN7yoUwMZ1hYSez8OMo1y7Q9WJmm4jmkDAuJMuDzzksWJJQdQVHsWb:JBs5Qir8OMwy8lbJMuD+IoHrZf4PKz

Malware Config

Extracted

Family

zloader

Botnet

nut

Campaign

09/10

C2

https://1stsecuritysolutions.co.uk/17vfj3.php

https://aplusevents.com.au/elxbmr.php

https://autoescolatopsul.com.br/zsog59.php

https://avecla.es/d3k34t.php

https://triccirohepe.tk/wp-smarts.php

https://botchicoffee.com/fmsbdt.php

https://buddingreport.com/yxewxx.php

Attributes
  • build_id

    163

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      2c599903042c465b6711805474f55548adc42c70634a7a1665d8cab874fdac35

    • Size

      300KB

    • MD5

      1b7222bcb47d6ac7432f0ec61642b952

    • SHA1

      3b9c2d45fd7813aecd6b40fba0eff184077f7022

    • SHA256

      2c599903042c465b6711805474f55548adc42c70634a7a1665d8cab874fdac35

    • SHA512

      7e858c83c56abb8747a8ceb2a97019f40af8b26ae417ac0a08711e93ddc186126bcfea684a5a27f1e06c1d016302788adc6ea0c655b844e3557698d1b924e77f

    • SSDEEP

      3072:JdiOeks5zUuN7yoUwMZ1hYSez8OMo1y7Q9WJmm4jmkDAuJMuDzzksWJJQdQVHsWb:JBs5Qir8OMwy8lbJMuD+IoHrZf4PKz

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

MITRE ATT&CK Matrix

Tasks