Zloader, Terdot, DELoader, ZeusSphinx

Zloader is a malware strain that was initially discovered back in August 2015.

suricata: ET MALWARE Generic -POST To gate.php w/Extended ASCII Characters (Likely Zeus Derivative)

suricata: ET MALWARE Generic -POST To gate.php w/Extended ASCII Characters (Likely Zeus Derivative)

suricata: ET MALWARE Observed ZLoader CnC Domain in SNI

suricata: ET MALWARE Observed ZLoader CnC Domain in SNI

suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz

suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz

suricata: ET MALWARE Trojan Generic - POST To gate.php with no referer

suricata: ET MALWARE Trojan Generic - POST To gate.php with no referer

suricata: ET MALWARE Zbot POST Request to C2

suricata: ET MALWARE Zbot POST Request to C2

Blocklisted process makes network request

Executes dropped EXE