07/15/2020: ZLoader Campaign IOCs

https://twitter.com/DynamicAnalysis/status/1283451811052032002

#ZLoader #malspam from today with .xls attachments.

Downloader URLs:
https://quuik.com/wp-keys.php
https://theincrediblebihar.com/wp-keys.php
https://tlcid.org/wp-keys.php
https://tvxnoticias.com/wp-keys.php

C2s:
https://epaweb.cl/wp-parsing.php
https://mediavision.se/wp-parsing.php
https://minkumarsapkota.com.np/wp-parsing.php
https://modernchina.org/wp-parsing.php
https://chwasinsvolanrosti.gq/wp-parsing.php
https://newwavechairco.com/wp-parsing.php
https://noithatnhathoang.vn/wp-parsing.php
https://stanapabserdoni.tk/wp-parsing.php

XLS Sample:
https://app.any.run/tasks/4b351baf-4476-47f9-afbc-6faba28f0fad

DLL sample:
https://app.any.run/tasks/adfb6cba-3189-4836-aab6-db388360d766