Extracted

• • Target

    d294955e1962a7342f6706facfbc735b8d84e94bf1de9ed0d7aa87bfc838f1f8.dll

  • Size

    192KB

  • MD5

    973392c2fd7228262e52becf3bfe2051

  • SHA1

    d309f4073f2a3244e71013996b8ea8e6fcc7b16f

  • SHA256

    d294955e1962a7342f6706facfbc735b8d84e94bf1de9ed0d7aa87bfc838f1f8

  • SHA512

    58bbbbac404e2aa70c7c3dd65c3cf7356387a6632874b3e3ba896f0c18396dc3db1232d13fd2456e3ec4c138b4a2e90b45e2c6964d9b177415e2068f5d340ff7

  Score

  10^/10

  zloader10/03botnetpersistencetrojan

  • Zloader, Terdot, DELoader, ZeusSphinx

    Zloader is a malware strain that was initially discovered back in August 2015.

    trojanbotnetzloader

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2