Overview

overview

10

Static

static

10

bcb6960b9f...18.dll

windows7-x64

10

bcb6960b9f...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bcb6960b9f204fe1a299e44d011964c3_JaffaCakes118

  • Size

    155KB

  • MD5

    bcb6960b9f204fe1a299e44d011964c3

  • SHA1

    9463ef0923c751223a676fd962d90345edf198ac

  • SHA256

    21587aadce40fc29bdf220e3ad7b63e87f9210dcc3742cf77dc7544438b8db32

  • SHA512

    1b075f1ae357e8d1af4a86c687a674a58991e108b2a7c2d45dda9119bc3d1f111c491176e034266efd741f687e203d4ee91d2a13d3f7ad74a06ebb69cd14dae1

  • SSDEEP

    3072:h35KkzBoJJ9DGW4tJ80rV81TSFtIWzepbhfm4OPdvl7h8iCP:edDGpJ8+V8CtIauh+4udkiC

Score
10/10
nut16/02zloader

Malware Config

Extracted

Family

zloader

Botnet

nut

Campaign

16/02

C2

https://wewalk.cl/post.php

https://dpack-co.com/post.php

https://dr-mirahmadi.ir/post.php

https://indiaastrologyfoundation.in/post.php

https://metisacademy.ir/post.php

https://lan-samarinda.com/post.php

https://pyouleigorgawimbwans.tk/post.php
Attributes
  • build_id

    351

rc4.plain
rsa_pubkey.plain

Signatures

  • Zloader family
    zloader
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bcb6960b9f204fe1a299e44d011964c3_JaffaCakes118
    .dll windows:6 windows x86 arch:x86

    04d63da449854a50a06bb1a873497ca1


    Headers

    Imports

    Sections