MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8afa8c9fc4f0d3c24dfc03477fb93c5df5e1c75b3926e5127a3d4aca6fa43a83. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


ZLoader


Vendor detections: 9


Intelligence 9 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8afa8c9fc4f0d3c24dfc03477fb93c5df5e1c75b3926e5127a3d4aca6fa43a83
SHA3-384 hash: eb2bbeeb1943d0f33af519b7af2c7a3ea8177c1e3c740eb4b9ecebd78435921182de03213b11eb4e2df55ebd07006bc7
SHA1 hash: 45131fff959d36d51c5ba07b369ffa9a2db32499
MD5 hash: 88adb0b457ea881c4b09ee65a8ee72f6
humanhash: fish-gee-hydrogen-quebec
File name:zloader 2_1.0.14.0.vir
Download: download sample
Signature ZLoader
Create hunting rule
File size:133'632 bytes
First seen:2020-07-19 19:45:25 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 318f9d9b26038fd22f8e887bf75745de (2 x ZLoader)
ssdeep 3072:+355Ep20RR86V+MONNSfOi98h28BnyZpEp1G/S1Okf:+35Op20CvSmHh28BnyC1GK1x
Threatray 47 similar samples on MalwareBazaar
TLSH 0CD308165838C534EA10017879AD77BF8D65822C3B179BAF9760C0C46FEC5A07EAF16E
Reporter tildedennis
Tags:ZLoader zloader 2


Avatar
tildedennis
zloader 2 version 1.0.14.0

Intelligence

File Origin
# of uploads :
1
# of downloads :
110
Origin country :
n/a
Vendor Threat Intelligence
Detection:
Zloader
Create hunting rule
Link:
https://www.capesandbox.com/analysis/28364/
Detection(s):
SecuriteInfo.com.Trojan.Packed.8813.9925.UNOFFICIAL
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a window
Unauthorized injection to a recently created process
Connection attempt to an infection source
Result
Threat name:
Unknown
Detection:
malicious
Classification:
evad
Score:
100 / 100
Link:
https://www.joesandbox.com/analysis/390577
Behaviour
Behavior Graph:
Download SVG
Detection:
zloader
Create hunting rule
Link:
https://mwdb.cert.pl/sample/8afa8c9fc4f0d3c24dfc03477fb93c5df5e1c75b3926e5127a3d4aca6fa43a83/
Threat name:
Win32.Infostealer.TinyNuke
Create hunting rule
Status:
Malicious
First seen:
2020-01-29 13:20:01 UTC
File Type:
PE (Exe)
AV detection:
26 of 31 (83.87%)
Threat level:
  5/5
Verdict:
malicious
Label(s):
zloader
Create hunting rule
Similar samples:
19f90b17a6bcf1c80551ae576d0949d51df8b8e26437a3a8aa6d5d4d344440c4
ZLoader
2b5e50bc3077610128051bc3e657c3f0e331fb8fed2559c6596911890ea866ba
ZLoader
69b37a5b3044cb14a9fc32440212f242e52f657b93306f4b90cccc3087ed4773
ZLoader
75b24a04b7ddddd036a8e677061e2cd86bc74f147f4b59de463964476db5f003
ZLoader
92f61cc6548277705585cc0c28d553093323d802a1d0d2e9fe618ebeaa6752fa
ZLoader
bbbc1a46aa7998a12dc9b13c29b5204b784669e60d8bb1d05fbf2741abf68342
ZLoader
be3d1522f968ad7cc46a996a64b5e5be8044075f6bd1784046e46671bf416b45
ZLoader
d538dfafbdf6ac115c24dbdd68c65dbef6460808dd2c4f3fc01d5e15bfc2f902
ZLoader
fb55aa4029e826e42520861cc82a8db4a3568f1d2b5fe6f39d7bf870ec0005f9
ZLoader
fe6778684fe56f143efd0bfae3e127f0c615f11d47e302e68a9eb1f83f7a6511
ZLoader
+ 37 additional samples on MalwareBazaar
Result
Malware family:
zloader
Create hunting rule
Score:
  10/10
Tags:
family:zloader
Link:
https://tria.ge/reports/200719-wrt25yszze/
Behaviour
Zloader family
Malware Config
C2 Extraction:
https://thoughtlibrary.top/library/topikpost.php
https://islacangrejo.fun/library/topikpost.php
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Unknown
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/8afa8c9fc4f0d3c24dfc03477fb93c5df5e1c75b3926e5127a3d4aca6fa43a83

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Link
https://zeusmuseum.com/zloader 2/
Cape
Cape
https://www.capesandbox.com/analysis/28364/

Comments