Resubmissions

15/11/2025, 05:01

251115-fnthza1nay10

09/10/2025, 11:39

251009-nr9y5axmw810

09/10/2025, 11:18

251009-nera9assfy10

09/10/2025, 11:02

251009-m43vxa11f110

12/01/2024, 16:05

240112-tjpk4sbcbk6

General

  • Target
    EpsilonApp.exe
  • Size 147KB
  • Sample251009-nera9assfy
  • SHA256 b206695fb128857012fe280555a32bd389502a1b47c8974f4b405ab19921ac93
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • zloader

Botnet
  • Bing_Mod2

Campaign
  • M1

C2
  • https://adslstickerni.world

rc4.plain
rsa_pubkey.plain

Targets

    • Target
      EpsilonApp.exe
    • Size 147KB
    • SHA256 b206695fb128857012fe280555a32bd389502a1b47c8974f4b405ab19921ac93
    • MD5 SHA1 SHA512 SSDEEP
    • Zloader family

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks