zloader | e6e972d93f6d8d1dbb56f41027614d7738bbe73d9a8cc65de8b06da666440ae5

General

Target

309661983ec46afb1868c9b8954d6b5e_JaffaCakes118
Size

953KB
Sample

241010-swc76sxhmj
MD5

309661983ec46afb1868c9b8954d6b5e
SHA1

407264334d98faca1d0945a554efeea9b9b3ad00
SHA256

e6e972d93f6d8d1dbb56f41027614d7738bbe73d9a8cc65de8b06da666440ae5
SHA512

1006b5e07bf686975c92a30372b1f83ea7c39f45b6597f66137dca2fa61d7648f690d04c85c8c20bc5b2bf04bba48c8ac851e9f06d354e867deb8189f2e683c6
SSDEEP

12288:nioQBrcKxHPULy+QVo5XeT8zZlmVlC+Q2cjQ7CJXPcq9g8:n9Q9cKxHo55Og9lU4xH

Score

10^/10

Malware Config

Extracted

Family

zloader

Botnet

vasja

Campaign

vasja

C2

https://iqowijsdakm.com/gate.php

https://wiewjdmkfjn.com/gate.php

https://dksaoidiakjd.com/gate.php

https://iweuiqjdakjd.com/gate.php

https://yuidskadjna.com/gate.php

https://olksmadnbdj.com/gate.php

https://odsakmdfnbs.com/gate.php

https://odsakjmdnhsaj.com/gate.php

https://odjdnhsaj.com/gate.php

https://odoishsaj.com/gate.php

Attributes

build_id
157

rc4.plain

rsa_pubkey.plain

Targets

- Target
  
  309661983ec46afb1868c9b8954d6b5e_JaffaCakes118
- Size
  
  953KB
- MD5
  
  309661983ec46afb1868c9b8954d6b5e
- SHA1
  
  407264334d98faca1d0945a554efeea9b9b3ad00
- SHA256
  
  e6e972d93f6d8d1dbb56f41027614d7738bbe73d9a8cc65de8b06da666440ae5
- SHA512
  
  1006b5e07bf686975c92a30372b1f83ea7c39f45b6597f66137dca2fa61d7648f690d04c85c8c20bc5b2bf04bba48c8ac851e9f06d354e867deb8189f2e683c6
- SSDEEP
  
  12288:nioQBrcKxHPULy+QVo5XeT8zZlmVlC+Q2cjQ7CJXPcq9g8:n9Q9cKxHo55Og9lU4xH
Score

10^/10

zloader vasja vasja botnet discovery trojan
- Zloader, Terdot, DELoader, ZeusSphinx
  Zloader is a malware strain that was initially discovered back in August 2015.
  trojan botnet zloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Zloader, Terdot, DELoader, ZeusSphinx

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2