Overview

overview

10

Static

static

10

b08a25a49a...72.dll

windows7-x64

1

b08a25a49a...72.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    18390870237.zip

  • Size

    76KB

  • MD5

    e0e0fff2a1e3db2bfcf7d51a48ca3846

  • SHA1

    b08f2bf05db2fad695810bf0130b02f798225695

  • SHA256

    6d8057a304f6cc2f98605895201bf0f0edad410691bc78c3e5dd8557f3a38f99

  • SHA512

    0c03ba1b413926a0cb3ee7d49e68c3f3ffcf4cc21cf28f5fb19cdf3eea7b7ebdd08983bec460f5055ebd5b87d57e6a3528389f02c23b09c12bb8068d0acb6cf5

  • SSDEEP

    1536:aA9eWob96BtghFvoOfYP9vlgh+XLT0pHetTB9kAeBicr09gaAEq18bjK5l:aA7bgIOgP9agX/EetQh6JAKjK5l

Score
10/10
bing_mod4m1zloader

Malware Config

Extracted

Family

zloader

Botnet

Bing_Mod4

Campaign

M1

C2

https://adslstickerhi.world

rc4.plain
rsa_pubkey.plain

Signatures

  • Zloader family
    zloader
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 18390870237.zip
    .zip

    Password: infected

  • b08a25a49a4e80001ac6cafc08a2e03d946a614f53b747fa1bac3a3e2b712a72
    .dll windows:6 windows x64 arch:x64

    29555fdc22e99644ec17992e2f69f852


    Headers

    Imports

    Exports

    Sections