General

  • Target

    165f249086dff6d982541437ae15d887

  • Size

    407KB

  • Sample

    231230-mv5cdaccel

  • MD5

    165f249086dff6d982541437ae15d887

  • SHA1

    733e95856f4791005930d6be215f77b1ec785f7f

  • SHA256

    745c1a73650cc03a68e954d215c5eee8454cb9655944aa4532af2e637ed39b05

  • SHA512

    fccaf5d29b2ff8b3d3aba6b27b6befbbdef3aa98916fa0b5148e55d45fa3461557e5b35f69649335f7630e62d06699395935853a204f847745065c60df72cff8

  • SSDEEP

    12288:0Vwp8ddqt738YMhYHhsaxOJEpcpTM5qtmyuLanW:0VwpKqt7sPhkszEayUHC

Malware Config

Extracted

Family

zloader

Botnet

vasja

Campaign

vasja

C2

https://iqowijsdakm.com/gate.php

https://wiewjdmkfjn.com/gate.php

https://dksaoidiakjd.com/gate.php

https://iweuiqjdakjd.com/gate.php

https://yuidskadjna.com/gate.php

https://olksmadnbdj.com/gate.php

https://odsakmdfnbs.com/gate.php

https://odsakjmdnhsaj.com/gate.php

https://odjdnhsaj.com/gate.php

https://odoishsaj.com/gate.php

Attributes
  • build_id

    157

rc4.plain
rsa_pubkey.plain

Targets

    • Target

      165f249086dff6d982541437ae15d887

    • Size

      407KB

    • MD5

      165f249086dff6d982541437ae15d887

    • SHA1

      733e95856f4791005930d6be215f77b1ec785f7f

    • SHA256

      745c1a73650cc03a68e954d215c5eee8454cb9655944aa4532af2e637ed39b05

    • SHA512

      fccaf5d29b2ff8b3d3aba6b27b6befbbdef3aa98916fa0b5148e55d45fa3461557e5b35f69649335f7630e62d06699395935853a204f847745065c60df72cff8

    • SSDEEP

      12288:0Vwp8ddqt738YMhYHhsaxOJEpcpTM5qtmyuLanW:0VwpKqt7sPhkszEayUHC

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

MITRE ATT&CK Matrix

Tasks