zloader | 9d8763451c2bd900dbf10e3cdb16132ec706b8e13dbd563aa15835d5b2d8cc4d

Sharing

Copy URL Twitter E-mail

General

Target
Battly-Launcher-Windows.exe
Size 112.1MB
Sample240818-17zvbaxfrf
SHA256 9d8763451c2bd900dbf10e3cdb16132ec706b8e13dbd563aa15835d5b2d8cc4d
MD5 03696da629e834c395f699847326448a
SHA1 3529afa76451ed5beeeb0bb4a31f7cc8bc463aa6
SHA512 fca0ef778b3ab13cf01e3d39d4c7eb4a587f600ed8d5ab10a03a3061178609dc13a75f6cc736ec27ed9f40a2a554030217cc91a8bf982d42f460585102f1969b
SSDEEP 3145728:SJcuNt6i+X0MdTUPo+YFawtU4odzp7emMT:qcuN7+QYFjmPztemE
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

zloader discovery

Malware Config

Targets

- Target
  Battly-Launcher-Windows.exe
- Size 112.1MB
- SHA256 9d8763451c2bd900dbf10e3cdb16132ec706b8e13dbd563aa15835d5b2d8cc4d
- MD5 03696da629e834c395f699847326448a
- SHA1 3529afa76451ed5beeeb0bb4a31f7cc8bc463aa6
- SHA512 fca0ef778b3ab13cf01e3d39d4c7eb4a587f600ed8d5ab10a03a3061178609dc13a75f6cc736ec27ed9f40a2a554030217cc91a8bf982d42f460585102f1969b
- SSDEEP 3145728:SJcuNt6i+X0MdTUPo+YFawtU4odzp7emMT:qcuN7+QYFjmPztemE
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2
- Target
  resources/app/node_modules/color-name/package.json
- Size 369B
- SHA256 fcae3844baef45d10ea5b3d36962c4bb517f6c0c0502da5dab6debc55c3e9359
- MD5 328719e73b38d4d0bdd56b2cb88a5feb
- SHA1 2cc0d94a27a8161ea76895b13ec73c5b2a2c97da
- SHA512 1f80c6800d4ab5da0497702c19e3d886c14da288869620050d7e81c31dcec16c8b74b9773cc94193076ceec11bd4d5a45bfcab8b3ffa692fedc29a8357a0782f
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  resources/app/node_modules/protocol/package.json
- Size 648B
- SHA256 1a1a2c784eb2553bbc8e55706ab5df3f07a35b36aa3c301677ce8393a0be7a0c
- MD5 22f168d990e82240c04af1d5385ab144
- SHA1 54c6009307e41a1cd39f8bcb9544d6831c310198
- SHA512 08d547b21f28ce8b175768e4e4a1904747331d02bc7689c6f27b4caebe7be39802b82331803f3d9b9784459a2267af917d9ca7fbb1eeca5078d667377ddb6d53
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  resources/app/node_modules/windows-shortcuts/lib/shortcut/ReadMe.txt
- Size 2KB
- SHA256 34ccbdfcbb0b54ae4db54d50d12c0b923ab1b8f485ff93c9c2f64fe3fb574f12
- MD5 7dd3bdf130a37bcd5e7de4cf642150e1
- SHA1 9cbf17699f354ba7213202e5510c770de077ba49
- SHA512 35761d3536b6441dab32e6394880915239a862e2e98c60e88a261887438bc308652776eb507775cf93d4b45050ac1cde2e5ccf2088f494ea2aace88f3a48db1a
- MD5 SHA1 SHA512
Score

1^/10
behavioral7 behavioral8
- Target
  resources/app/node_modules/windows-shortcuts/package.json
- Size 577B
- SHA256 540b79de6a1c3583c8255b304849701744a9a640fa45f10b64ec983be7bd408a
- MD5 d35a29eb509d52f43ad8d7d7e57557ca
- SHA1 73e4a065cfca688e7f6813af77bbd5ddb63f7148
- SHA512 b722f588a5e49eb787d0f9ac266f50baccf5fd3bd9f3023dc70833fb68f84605571fbaf8c459bfde902c98f4572132fb8590ee03548ed6fd5f53de5d30d5a90c
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  resources/app/package.json
- Size 530B
- SHA256 9f66eafe35c475aaba1157c877406f448273c6e4811a1ef2fce10aa0d5eee706
- MD5 e102ea0d9f0e36be31e25b787c35ca2c
- SHA1 022ea237f37e95570872a64ba6af1e2f63cb0dab
- SHA512 426e0af432f24562e548bf53ea972636c494f0c5b840b9e6affbc40f32fdb9de3cde3c4fd83d9a221eae9832a42631b2b178a3d46f1b2a56d1a82978fe32fc51
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  resources/app/src/ads.ejs
- Size 1KB
- SHA256 828df948e8dd1e0fc2a88511fd1f59568a97fc2c3626152e574e5f31c89ff5e8
- MD5 d7f2205fb3ea4fc29629fd16cc13e42e
- SHA1 ac4addc19bdf3f56a2b2aa0b8e5a2b2d459b209f
- SHA512 6ff7cbfb366642d6b1ce5ce15f335b27a8f500341bb059f6037d50409c071d9ef8a735c447a876bd986f4902e377a773b9e41e09d7d433b8365a5049a689bf3a
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  resources/app/src/assets/css/index.css
- Size 20KB
- SHA256 2f281d5eb03f52a46514089fd0b0af408f02613a8fcef8d506dc01f590651d7c
- MD5 9338a403220d934986f5dc738419174d
- SHA1 33d0a93608f28900b4771b49d88259b2f70350e7
- SHA512 cd92d15c6ee9d6d9ed78fa073406462d5f3b33cc9c198a693fa51f53889ba9f5ef2a498ea3f033ef7cad73b1248e4bad9afcad8246f5b98dcde3435399dca508
- SSDEEP 192:zIPPOBM/UfNLh38L6wLLd949+cZaxYPrunqm0LJ4nqBDmwsNSflfBWG+ngBmb:UFUf7ML6hPrDz+KfBWtg0
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral15 behavioral16
- Target
  resources/app/src/assets/icon.icns
- Size 52KB
- SHA256 3163ed50c1b8301bb87cbbe983d87e072aaf1fa4b9c2e5917a9df858033059a9
- MD5 a9ac947c7d14b1827647cd7232df4994
- SHA1 4d914955e8d9dcc566e56d912dc4227e5048bf4e
- SHA512 49c664e58050a47efce4da174658bfa94efb434d93a896edc9658a0b594c818a0a98254c197e241ee9c235d0707baa7efa4f7b3f571f10c48c4bd6c2facd538f
- SSDEEP 1536:wu8c5oFMRj2A+zRBWQ7bxIqcY0652Ke1YfR93rkQ:wuJoFMFGyQJIqcY0O2KWYv7kQ
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  resources/app/src/assets/icon.ico
- Size 11KB
- SHA256 9a6b51f26c9efb993a02f67582477d9b524b029af5d6b1bea046840012dc110e
- MD5 372b8e595552272d8980d7ce68a22a45
- SHA1 3458abecc3172f86c0a42f889402a700964a7bdc
- SHA512 bb712405ea0c0ec66add82abd04ca8f32e07bea7e4bbdcb2bce53a16caf8d9bf2a514ec8e647739e739f995931fc6d04d155e8b2f381fb93765024a4aebc1fa4
- SSDEEP 192:5oE/UpLYcasZP5WUZ0iClTa8VhjO/wulukJ4M8JQTtDdtEDQ76nE/Vcb8VM8eQvP:j40cNZP5rqiClfhQwuUek6tDEsiockfP
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral19 behavioral20
- Target
  resources/app/src/assets/icon.png
- Size 19KB
- SHA256 9f3d301cf823e1d227b8521a83ca50de4719eecad1f31ec17e70c159ce70a19d
- MD5 789fc1c35197db8ea9870e1c66f847f0
- SHA1 62638e9d9631714e7eb8f83ad3beafcb4f6b2e53
- SHA512 1e1a0d4c8b544b06edecfadfd36c2614671ccf77d80e88822adcd53bfa305f2ab1b6a532728c867200d781f1519d940fd45bc8f7f4a645c48b4e9e3c746e0890
- SSDEEP 384:rlJPiprOzKXyyu7AQ5KwmrCLAhWfylRZrq3+lhxp+3IM2:pJPi9OIA5KxrCLAhWfyFq3Gxp+YF
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral21 behavioral22
- Target
  resources/app/src/assets/images/background.png
- Size 713KB
- SHA256 62a7ec1cb750aa28bcfdc93cebf1521f8cdc352992938652527aacb79618e57c
- MD5 54d3046d693ef7dc0e06a32ff629e7a1
- SHA1 1d14c54f2db92c94e467dc3b3f6480fe737ed830
- SHA512 b4e123d3bf4b21bdb1c73ab9374bad0e1090e5cfd0b758bebfd907d4f3736c9f4e87e73e693a85eed66bd0e1eee85fbcf1a152eeb83ea6f317e85022d67fca3d
- SSDEEP 12288:U/xhayudk53PLRv6C4UxLj5UE8VYJXgf/FVxenbd+pf5TjXVmhgOAX7KOJreROM0:U7fudk5/dx4Ufhw33xg0fYgTrKOuOMHU
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral23 behavioral24
- Target
  resources/app/src/assets/images/flags/ar.png
- Size 761B
- SHA256 761cba50b4fbbc720f4a594947834239bb0556452a53ca65dad3b89a60790738
- MD5 4259ceccb7747b79119f669f4e096e10
- SHA1 d17d81f676dfa2dd8c0f6dd91a29a05306b23a69
- SHA512 e6583326099e2b70b3a4b61c7e604f17227615a9062f9948aa291e04d5c1c78b99d136a537f4d65c5a28e75f4c9f960f0b8ef10e51975b2db095775ef9e69ee9
- MD5 SHA1 SHA512
Score

3^/10
behavioral25 behavioral26
- Target
  resources/app/src/assets/images/flags/de.png
- Size 274B
- SHA256 b9d2aced61236662459e3acaaeaf44ce7af28405847c9a54d42fa4ae344f045f
- MD5 0c730750c8a99bc30cf20b83d235aea6
- SHA1 8ea6cd3bbdaae43607b4882560c4e04ef8eeaf8d
- SHA512 2fc3251378520052892b529b8c3638cbc3dd9c4ac471dc20382930c103c886826f05969400d7d1054b066cc81d00813ba86532b20be646aa8910efec9dfc6c23
- MD5 SHA1 SHA512
Score

3^/10
behavioral27 behavioral28
- Target
  resources/app/src/assets/images/flags/en.png
- Size 310B
- SHA256 e423db68a40835ac299155e365864461e37115a96f996091d5af026103d753e2
- MD5 c2de03c4d117d87763d4e1e5e28482db
- SHA1 bfbecbfba4c5a871894c6784da913fa495a2aa3b
- SHA512 628f47a91c2605a66dda06430f26d8685384136c0d04bc3146dd033462ef7def71c7d9ddd43cf3d07e892a400d089faed938a91317a94fce4febfd01183e1301
- MD5 SHA1 SHA512
Score

3^/10
behavioral29 behavioral30
- Target
  resources/app/src/assets/images/flags/es.png
- Size 370B
- SHA256 c79f2cdfee1e6666b8180b7ee33d1f06bcffb113e602e8ec47b668d4db4f18d9
- MD5 ff0df90a5a69c16ef24fab173a89ee4f
- SHA1 02b14de1912f54b2b0630346c2cfe75a8da6d5b9
- SHA512 4387449064aada45fba5e933304c5f931c29187acc025d291f1a758c6b2453085faa42693b2395fb08829b62187577988149514e133c2d4c58d6a2ed851f7ccc
- MD5 SHA1 SHA512
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Drops file in System32 directory

Checks computer location settings

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32