Overview

overview

10

Static

static

9

tmpa14ow0cp.dll

windows10-ltsc_2021-x64

10

tmpa14ow0cp.dll

windows10-2004-x64

10

tmpa14ow0cp.dll

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    tmpa14ow0cp
  • Size 615KB
  • Sample260602-h65easfz3s
  • SHA256 9c17c2bc2e06ffb1e6b7cf9ce808cf55f9755e4e337b73c95cea0fa00965da76
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
zloaderspx138spx138botnetcryptonediscoverypackertrojan

Malware Config

Extracted

Family

  • zloader

Botnet

  • spx138

Campaign

  • spx138

C2

  • https://xeemoquo.top/treusparq.php

  • https://leeephee.top/treusparq.php

  • https://withifceale.top/treusparq.php

  • https://wpsnoum.pw/treusparq.php

  • https://wsaexdig.pw/treusparq.php

Attributes
  • build_id

    10

rc4.plain
rsa_pubkey.plain

Targets

    • Target
      tmpa14ow0cp
    • Size 615KB
    • SHA256 9c17c2bc2e06ffb1e6b7cf9ce808cf55f9755e4e337b73c95cea0fa00965da76
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    botnetspx138spx138discoveryzloadertrojan

    • Family: Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

      trojanbotnetzloader
    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v16

Tasks