Overview

overview

10

Static

static

3

a45285ccb1...05.dll

windows10-1703-x64

10

Resubmissions

04-12-2023 13:41

231204-qzbseabe79 10

04-12-2023 13:38

231204-qxf94sbd8s 10

31-10-2023 10:26

231031-mggn6ahc65 10

10-08-2023 17:11

230810-vqh8cahc9s 10

10-08-2023 16:29

230810-tze2lsfa39 10

14-12-2020 12:28

201214-tqnw85bqbe 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a45285ccb16e3f56baf9d092245cf205

  • Size

    667KB

  • Sample

    230810-tze2lsfa39

  • MD5

    a45285ccb16e3f56baf9d092245cf205

  • SHA1

    6b8a73888f211dc17e7ac7dd7e6952bd8bc94232

  • SHA256

    f00cb68eaca0ed077b858cb2211c72bd88c6e8c33c5ac395eca7af9811855dc2

  • SHA512

    c7ed9e2d37222820b8fdc4b8f00a72cf9cc5d7c83d12640b7f9dce68519cc90dd4eef64e0fd9494d0305a6871bae4f142289cf3d8c8e42d68123f068466e7c38

  • SSDEEP

    12288:/SNqyfHwQuzEa3IjYVzP/pBSZ6mxcSi+NsC1lV+9Evu15Jajj9B:/i1vwnn3/JgckNsQqEms

Score
10/10
zloaderdll26dll26botnetpersistencetrojan

Malware Config

Extracted

Family

zloader

Botnet

dll26

Campaign

dll26

C2

https://eecakesconf.at/web982/gate.php

Attributes
  • build_id

    7

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      a45285ccb16e3f56baf9d092245cf205

    • Size

      667KB

    • MD5

      a45285ccb16e3f56baf9d092245cf205

    • SHA1

      6b8a73888f211dc17e7ac7dd7e6952bd8bc94232

    • SHA256

      f00cb68eaca0ed077b858cb2211c72bd88c6e8c33c5ac395eca7af9811855dc2

    • SHA512

      c7ed9e2d37222820b8fdc4b8f00a72cf9cc5d7c83d12640b7f9dce68519cc90dd4eef64e0fd9494d0305a6871bae4f142289cf3d8c8e42d68123f068466e7c38

    • SSDEEP

      12288:/SNqyfHwQuzEa3IjYVzP/pBSZ6mxcSi+NsC1lV+9Evu15Jajj9B:/i1vwnn3/JgckNsQqEms

    Score
    10/10
    zloaderdll26dll26botnetpersistencetrojan

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

      trojanbotnetzloader

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks