Resubmissions

21/01/2025, 16:48

250121-vbk4dstkas 10

08/11/2024, 14:40

241108-r1wdwatgrl 3

General

  • Target

    8b22b777f58ddd8a49841ccf4688ebb71007dec9.dll.exe

  • Size

    460KB

  • MD5

    83b9c187fad8a8101c8d2393b33d25f6

  • SHA1

    8b22b777f58ddd8a49841ccf4688ebb71007dec9

  • SHA256

    2794a703aff5549a89834d0ef8ad4b97ce12e27fa37852dd2a504e5a0078b093

  • SHA512

    1b6ac178260eae55402672f59cb662c15b5e9e9d14659328d68de24df08a503e7122562f37c1e3c8ced6297504f818eb275008cbc92e8d29067be92ba83e7a06

  • SSDEEP

    6144:Xc+kUlZndUcgzpK8XOFGEvOcMlZjMR8x40A79uriJJUqy9RznJ/c:XzrJ2ckXkGEmcMl1sGmuzqynJ/c

Score
10/10

Malware Config

Extracted

Family

zloader

Botnet

Penta2

Campaign

1.1

C2

https://unitedcommunity.world/

Attributes
  • dns

    https://fordns/corproot/

    dns://ns1.brownswer.com

rsa_pubkey.plain
rc4.hex

Signatures

  • Zloader family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8b22b777f58ddd8a49841ccf4688ebb71007dec9.dll.exe
    .dll regsvr32 windows:6 windows x64 arch:x64

    c4f79cbcb5ca7cb336f74e191000f730


    Headers

    Imports

    Exports

    Sections