General
-
Target
zloader 2_1.0.12.0.vir
-
Size
165KB
-
Sample
200719-brg9blef3e
-
MD5
fa1a19977598c3f020882a4fa32e04b7
-
SHA1
c902504f5377c31324e28801a67be6957e41271a
-
SHA256
97139bbaf34d92df333d9f791d12b11a8a273151edcaecb9ab7ec75bb034552f
-
SHA512
e8601a99fd078ce1084384205ea301806bafe000196fbef9bb39dbf6bc7c64e7d18bb630c11f101ae6a9776bf59ba5c9c20b1db46627d78db6a2f01912e6b06a
Static task
static1
Behavioral task
behavioral1
Sample
zloader 2_1.0.12.0.vir.exe
Resource
win7v200430
Behavioral task
behavioral2
Sample
zloader 2_1.0.12.0.vir.exe
Resource
win10
Malware Config
Extracted
zloader
vlenie2020
obnova20
https://dasifosafjasfhasf.com/gate.php
https://kasfajfsafhasfhaf.com/gate.php
https://fdsjfjdsfjdsjfdjsfh.com/gate.php
https://fdsjfjdsfjdsdsjajjs.com/gate.php
https://idisaudhasdhasdj.com/gate.php
https://dsjdjsjdsadhasdas.com/gate.php
https://dsdjfhdsufudhjas.com/gate.php
Targets
-
-
Target
zloader 2_1.0.12.0.vir
-
Size
165KB
-
MD5
fa1a19977598c3f020882a4fa32e04b7
-
SHA1
c902504f5377c31324e28801a67be6957e41271a
-
SHA256
97139bbaf34d92df333d9f791d12b11a8a273151edcaecb9ab7ec75bb034552f
-
SHA512
e8601a99fd078ce1084384205ea301806bafe000196fbef9bb39dbf6bc7c64e7d18bb630c11f101ae6a9776bf59ba5c9c20b1db46627d78db6a2f01912e6b06a
Score10/10-
Blacklisted process makes network request
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-