General

  • Target

    a45285ccb16e3f56baf9d092245cf205

  • Size

    667KB

  • Sample

    231204-vexatsda3x

  • MD5

    a45285ccb16e3f56baf9d092245cf205

  • SHA1

    6b8a73888f211dc17e7ac7dd7e6952bd8bc94232

  • SHA256

    f00cb68eaca0ed077b858cb2211c72bd88c6e8c33c5ac395eca7af9811855dc2

  • SHA512

    c7ed9e2d37222820b8fdc4b8f00a72cf9cc5d7c83d12640b7f9dce68519cc90dd4eef64e0fd9494d0305a6871bae4f142289cf3d8c8e42d68123f068466e7c38

  • SSDEEP

    12288:/SNqyfHwQuzEa3IjYVzP/pBSZ6mxcSi+NsC1lV+9Evu15Jajj9B:/i1vwnn3/JgckNsQqEms

Malware Config

Extracted

Family

zloader

Botnet

dll26

Campaign

dll26

C2

https://eecakesconf.at/web982/gate.php

Attributes
  • build_id

    7

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      a45285ccb16e3f56baf9d092245cf205

    • Size

      667KB

    • MD5

      a45285ccb16e3f56baf9d092245cf205

    • SHA1

      6b8a73888f211dc17e7ac7dd7e6952bd8bc94232

    • SHA256

      f00cb68eaca0ed077b858cb2211c72bd88c6e8c33c5ac395eca7af9811855dc2

    • SHA512

      c7ed9e2d37222820b8fdc4b8f00a72cf9cc5d7c83d12640b7f9dce68519cc90dd4eef64e0fd9494d0305a6871bae4f142289cf3d8c8e42d68123f068466e7c38

    • SSDEEP

      12288:/SNqyfHwQuzEa3IjYVzP/pBSZ6mxcSi+NsC1lV+9Evu15Jajj9B:/i1vwnn3/JgckNsQqEms

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

MITRE ATT&CK Matrix

Tasks