General
- Target EpsilonApp.exe
- Size 147KB
- Sample251009-nera9assfy
- SHA256 b206695fb128857012fe280555a32bd389502a1b47c8974f4b405ab19921ac93
- MD5 f82d3b9409c2f60ab0d7b028fa4ee3e4
- SHA1 6a6021185686ab0d7eb75d1fc27b6bee2c9b1931
- SHA512 8abfbb298eece49f1947430cc5660ceab2af59286099e3ed770f4503b3a8812f97c2e53ab49cc3e1ec6eb8418417e60deb09bb19b2b9c9a8e9f420b1eb392096
- SSDEEP 3072:UazsB/DjZSiUYuclP6LULzOIG8woDDUoPzoICpaqqjsVhG/KZ:6hUDc8LULzdG8woD4oherXhqK
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
EpsilonApp.exe
Resource
win10v2004-20250619-en
7 signatures
900 seconds
Malware Config
Extracted
Family
-
zloader
Botnet
-
Bing_Mod2
Campaign
-
M1
C2
-
https://adslstickerni.world
rc4.plain
rsa_pubkey.plain
Targets
-
- Target EpsilonApp.exe
- Size 147KB
- SHA256 b206695fb128857012fe280555a32bd389502a1b47c8974f4b405ab19921ac93
- MD5 f82d3b9409c2f60ab0d7b028fa4ee3e4
- SHA1 6a6021185686ab0d7eb75d1fc27b6bee2c9b1931
- SHA512 8abfbb298eece49f1947430cc5660ceab2af59286099e3ed770f4503b3a8812f97c2e53ab49cc3e1ec6eb8418417e60deb09bb19b2b9c9a8e9f420b1eb392096
- SSDEEP 3072:UazsB/DjZSiUYuclP6LULzOIG8woDDUoPzoICpaqqjsVhG/KZ:6hUDc8LULzdG8woD4oherXhqK
- MD5 SHA1 SHA512 SSDEEP
-
Zloader family
-
Suspicious use of SetThreadContext