Overview

overview

10

Static

static

10

603bd9ee50...d3.dll

windows10-2004-x64

1

Resubmissions

21-01-2025 16:48

250121-vbexdatjhx 10

14-12-2024 23:03

241214-21nddayncr 3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    603bd9ee50f7dc6de37f314bda227561f0fd67cdebf53a672ea32cce73a2efd3.exe

  • Size

    460KB

  • MD5

    7980094788f0e46145bdff91b0f4743e

  • SHA1

    039f786b81455c83dc50283e42d0ee2ac48059c8

  • SHA256

    603bd9ee50f7dc6de37f314bda227561f0fd67cdebf53a672ea32cce73a2efd3

  • SHA512

    5face15afb197070f2411dfd4759c2be5daf102b24b5f43a01090b8bbeaa0ea9324b5791259d049b8c87c4d53d63843563d7b4b1d24933d8450ea52741be3ce2

  • SSDEEP

    6144:TYSbPcIFqVNwHRIkXRMTPPcIBbVpov6Cxfqm3xKRe+KTc:0Sb0tNwHtRcvVpLCBDWe+KTc

Score
10/10
penta21.1zloader

Malware Config

Extracted

Family

zloader

Botnet

Penta2

Campaign

1.1

C2

https://unitedcommunity.world/

Attributes
  • dns

    https://fordns/corproot/

    dns://ns1.brownswer.com

rsa_pubkey.plain
rc4.hex

Signatures

  • Zloader family
    zloader
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 603bd9ee50f7dc6de37f314bda227561f0fd67cdebf53a672ea32cce73a2efd3.exe
    .dll regsvr32 windows:6 windows x64 arch:x64

    e78df8995d788e9664d5306651cffb6f


    Headers

    Imports

    Exports

    Sections