Overview

overview

10

Static

static

Zloader Dll.dll

windows7_x64

10

Zloader Dll.dll

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Zloader Dll
  • Size 433KB
  • Sample200707-le2pcbrm36
  • SHA256 3bf8fbdad095013493d1b90f5c82880dc57145dfbb54fdf225ded88ba6b1618b
  • MD5 SHA1 SHA512
Score
10/10
zloaderbotnetevasionspywaretrojan

Malware Config

Targets

    • Target
      Zloader Dll
    • Size 433KB
    • SHA256 3bf8fbdad095013493d1b90f5c82880dc57145dfbb54fdf225ded88ba6b1618b
    • MD5 SHA1 SHA512
    Score
    10/10
    trojanbotnetzloaderevasionspyware

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

      trojanbotnetzloader

    • Blacklisted process makes network request

    • Modifies system certificate store

      evasionspywaretrojan

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks