General

  • Target

    69c4f37bac324873c0caea8194b91f9ee804cef77ee21bdb2f8f35e5c884878c

  • Size

    667KB

  • Sample

    231204-xszn8aec9x

  • MD5

    14329d9e980e7a427e941f7d5d71365c

  • SHA1

    07ede188c7e143443eb8fcd9dfa347481b34fcc2

  • SHA256

    69c4f37bac324873c0caea8194b91f9ee804cef77ee21bdb2f8f35e5c884878c

  • SHA512

    6fa538242f02dbf469a9c9ea4ddbdaa628001796b367106d711cb5a38c507badf04194d85f5c3e277ff0742c2bf1873b8e3c68afd9ade8b998ec7c7c442c8e33

  • SSDEEP

    12288:/SNqyfrwQuzEa3IjYVzP/pBSZ6mxcSi+NsC1lV+9Evu15Jajj9B:/i1Dwnn3/JgckNsQqEms

Malware Config

Extracted

Family

zloader

Botnet

dll26

Campaign

dll26

C2

https://eecakesconf.at/web982/gate.php

Attributes
  • build_id

    7

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      69c4f37bac324873c0caea8194b91f9ee804cef77ee21bdb2f8f35e5c884878c

    • Size

      667KB

    • MD5

      14329d9e980e7a427e941f7d5d71365c

    • SHA1

      07ede188c7e143443eb8fcd9dfa347481b34fcc2

    • SHA256

      69c4f37bac324873c0caea8194b91f9ee804cef77ee21bdb2f8f35e5c884878c

    • SHA512

      6fa538242f02dbf469a9c9ea4ddbdaa628001796b367106d711cb5a38c507badf04194d85f5c3e277ff0742c2bf1873b8e3c68afd9ade8b998ec7c7c442c8e33

    • SSDEEP

      12288:/SNqyfrwQuzEa3IjYVzP/pBSZ6mxcSi+NsC1lV+9Evu15Jajj9B:/i1Dwnn3/JgckNsQqEms

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

MITRE ATT&CK Matrix

Tasks