Overview

overview

10

Static

static

1

psr.exe

windows7-x64

10

psr.exe

windows10-ltsc 2021-x64

6

psr.exe

windows11-21h2-x64

6

Resubmissions

02-12-2024 01:29

241202-bwgrxsslev 6

01-12-2024 01:16

241201-bm536a1rbv 7

01-12-2024 01:06

241201-bf6q4swlcn 6

30-11-2024 23:55

241130-3yyxrstqbq 6

30-11-2024 23:55

241130-3ypn4azjfv 6

30-11-2024 23:35

241130-3lf67atmal 6

30-11-2024 22:13

241130-15bppsxjhx 7

27-11-2024 20:24

241127-y6snhaynhv 7

26-11-2024 17:03

241126-vkvzyswqdk 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    psr.exe

  • Size

    13.4MB

  • Sample

    241118-qlyp1sslgm

  • MD5

    33c9518c086d0cca4a636bc86728485e

  • SHA1

    2420ad25e243ab8905b49f60fe7fb96590661f50

  • SHA256

    ba30ea16cd8fbd9209d40ae193206ad00f042d100524cf310982c33369325ca2

  • SHA512

    6c2c470607b88e7cd79411b7a645b395cee3306a23e6ba50b8ac57f7d5529a1b350c34e19da69aeb1ffade44d5187b4a1ef209a53d21a83e9e35add10fc7867d

  • SSDEEP

    49152:W/XzWTJmbjeHLKLpyNpaQ+69tPvGUmskDXs4Awd9CBqcUiInvlT2hPnXiwzYJ33S:W/EmGrKL2pllzP+UNkEARmzY1C

Score
10/10
zloaderbotnetdiscoverypersistenceprivilege_escalationtrojan

Malware Config

Targets

    • Target

      psr.exe

    • Size

      13.4MB

    • MD5

      33c9518c086d0cca4a636bc86728485e

    • SHA1

      2420ad25e243ab8905b49f60fe7fb96590661f50

    • SHA256

      ba30ea16cd8fbd9209d40ae193206ad00f042d100524cf310982c33369325ca2

    • SHA512

      6c2c470607b88e7cd79411b7a645b395cee3306a23e6ba50b8ac57f7d5529a1b350c34e19da69aeb1ffade44d5187b4a1ef209a53d21a83e9e35add10fc7867d

    • SSDEEP

      49152:W/XzWTJmbjeHLKLpyNpaQ+69tPvGUmskDXs4Awd9CBqcUiInvlT2hPnXiwzYJ33S:W/EmGrKL2pllzP+UNkEARmzY1C

    Score
    10/10
    zloaderbotnetdiscoverypersistenceprivilege_escalationtrojan

    • Zloader family

      zloader

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

      trojanbotnetzloader

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks