Overview

overview

10

Static

static

10

6d988b8354...c2.dll

windows7-x64

1

6d988b8354...c2.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6d988b8354a58034452292233b5f74c2

  • Size

    132KB

  • MD5

    6d988b8354a58034452292233b5f74c2

  • SHA1

    1608d7704430b8c2df03607b73d4dfe1b71b4a7f

  • SHA256

    195613f072dc9f8ebee75badb47d755cd6ca975b8a0060dda28d800a5d35a98f

  • SHA512

    adadea5facfeabe545e857163feff64e7ca18042d56e383d26d9f61528411aab6d0e5e7f3d8ef2b79979e243df45c930ca392da9315f7e9244fae97b140ed6c2

  • SSDEEP

    3072:6uCuWdaZ1diQ2OmuHzPaQifuEURP4lm1R+nZ3VazB:6fuviQb7aLuEscQB

Score
10/10
googleaktualizacijagoogleaktualizacija2zloader

Malware Config

Extracted

Family

zloader

Botnet

googleaktualizacija

Campaign

googleaktualizacija2

C2

https://iqowijsdakm.com/gate.php

https://wiewjdmkfjn.com/gate.php

https://dksaoidiakjd.com/gate.php

https://iweuiqjdakjd.com/gate.php

https://yuidskadjna.com/gate.php

https://olksmadnbdj.com/gate.php

https://odsakmdfnbs.com/gate.php

https://odsakjmdnhsaj.com/gate.php

https://odjdnhsaj.com/gate.php

https://odoishsaj.com/gate.php
Attributes
  • build_id

    156

rc4.plain
rsa_pubkey.plain

Signatures

  • Zloader family
    zloader
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6d988b8354a58034452292233b5f74c2
    .dll windows:6 windows x86 arch:x86

    c664431252df8f07d4f449e966177c8b


    Headers

    Imports

    Sections