Resubmissions

21-01-2025 16:48

250121-va9qcstnbm 10

17-12-2024 01:10

241217-bjnppswqdk 3

General

  • Target

    GridCloud.dll

  • Size

    455KB

  • Sample

    250121-va9qcstnbm

  • MD5

    fcd09874767c2098a6d6670f2eac07e2

  • SHA1

    6f5837fc6b22b4c66aafaf727c0d319241c15e5c

  • SHA256

    3610f213db22a9de07dbbed4fbf6cec78b6dd4d58982c91f3a4ef994b53a8adc

  • SHA512

    3e2824d6fbaa744e3ceb72e0b581ca4ae5069788117f1825b995df274ba89b87ef3c3d22d40b0139242fe10d194e2253d84100611dd1c880815ef6c709e8afa6

  • SSDEEP

    6144:5e2/uO/8i17KZxx/KVb1KC8jZtsTh+se/ntxNKq8IzBgoQ2eKQC5:5hUs7KxxeJqjZtsMDbX1a524

Score
10/10

Malware Config

Extracted

Family

zloader

Botnet

Penta2

Campaign

1.1

C2

https://unitedcommunity.world/

Attributes
  • dns

    https://fordns/corproot/

    dns://ns1.brownswer.com

rsa_pubkey.plain
rc4.hex

Targets

    • Target

      GridCloud.dll

    • Size

      455KB

    • MD5

      fcd09874767c2098a6d6670f2eac07e2

    • SHA1

      6f5837fc6b22b4c66aafaf727c0d319241c15e5c

    • SHA256

      3610f213db22a9de07dbbed4fbf6cec78b6dd4d58982c91f3a4ef994b53a8adc

    • SHA512

      3e2824d6fbaa744e3ceb72e0b581ca4ae5069788117f1825b995df274ba89b87ef3c3d22d40b0139242fe10d194e2253d84100611dd1c880815ef6c709e8afa6

    • SSDEEP

      6144:5e2/uO/8i17KZxx/KVb1KC8jZtsTh+se/ntxNKq8IzBgoQ2eKQC5:5hUs7KxxeJqjZtsMDbX1a524

    Score
    1/10

MITRE ATT&CK Matrix

Tasks