Overview

overview

10

Static

static

10

d212042504...16.dll

windows10-2004-x64

1

Resubmissions

21-01-2025 16:49

250121-vbshgatncp 10

13-12-2024 20:33

241213-zbzzrszmgq 3

13-12-2024 20:30

241213-y95r8sykbv 3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20351248985.zip

  • Size

    245KB

  • MD5

    4f9691a6f873256d27688321423c2f40

  • SHA1

    ed20304b0b1b051e78ee8ae38181dee3fe0c2c7a

  • SHA256

    d970b9e75ae60030bc4a0d3272bc38a378db01d329ecbbcab56d4b78f7d843ad

  • SHA512

    4aaf2440765c2ef4a1ccd9d3f98f9d25bfb7ff452ce2dc015bccddd97d76516e2ed58a2a26b39fbd8a7e0a386b5e590bf56d05486d4e0c79d815f27d602f2d33

  • SSDEEP

    6144:f/m2sBRZBw4zwttIFMSh0ZsfHs/4p2g082YynPJacUY1n:f/LQRrpWk1h0Kf882YoRa4n

Score
10/10
penta11.1zloader

Malware Config

Extracted

Family

zloader

Botnet

Penta1

Campaign

1.1

C2

https://bigdealcenter.world/

Attributes
  • dns

    https://fordns/corproot/

    dns://ns1.brownswer.com

rsa_pubkey.plain
rc4.hex

Signatures

  • Zloader family
    zloader
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 20351248985.zip
    .zip

    Password: infected

  • d212042504f851253347754c3d3624628e7ebf7c0bbd8160220bf6edcff24f16
    .dll regsvr32 windows:6 windows x64 arch:x64

    Password: infected

    1417cee5b61a726686e7e65420eb802d


    Headers

    Imports

    Exports

    Sections