Overview

overview

10

Static

static

10

GridCloud.dll

windows10-2004-x64

1

Resubmissions

21-01-2025 16:48

250121-va9qcstnbm 10

17-12-2024 01:10

241217-bjnppswqdk 3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    GridCloud.dll

  • Size

    455KB

  • MD5

    fcd09874767c2098a6d6670f2eac07e2

  • SHA1

    6f5837fc6b22b4c66aafaf727c0d319241c15e5c

  • SHA256

    3610f213db22a9de07dbbed4fbf6cec78b6dd4d58982c91f3a4ef994b53a8adc

  • SHA512

    3e2824d6fbaa744e3ceb72e0b581ca4ae5069788117f1825b995df274ba89b87ef3c3d22d40b0139242fe10d194e2253d84100611dd1c880815ef6c709e8afa6

  • SSDEEP

    6144:5e2/uO/8i17KZxx/KVb1KC8jZtsTh+se/ntxNKq8IzBgoQ2eKQC5:5hUs7KxxeJqjZtsMDbX1a524

Score
10/10
penta21.1zloader

Malware Config

Extracted

Family

zloader

Botnet

Penta2

Campaign

1.1

C2

https://unitedcommunity.world/

Attributes
  • dns

    https://fordns/corproot/

    dns://ns1.brownswer.com

rsa_pubkey.plain
rc4.hex

Signatures

  • Zloader family
    zloader
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • GridCloud.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    9fd1b1d57c6c724c2796f17471e2e233


    Headers

    Imports

    Exports

    Sections