Extracted

• • Target

    c55a25514c0d860980e5f13b138ae846b36a783a0fdb52041e3a8c6a22c6f5e2

  • Size

    372KB

  • MD5

    bb1272e0e3289985b4578f1b013fa5d5

  • SHA1

    b19802976ff277fd4dd1adb5e950d84a3fcf6cf5

  • SHA256

    c55a25514c0d860980e5f13b138ae846b36a783a0fdb52041e3a8c6a22c6f5e2

  • SHA512

    24cc60455a51a598482f6c1143e9027736dc4c82ca58aa8ae0e3c540006491d5b005284bf32167876ffaa60bedfa114cc59b07faa2b3e87b80b9f08713a18d42

  Score

  10^/10

  zloaderkev21/01botnetsuricatatrojan

  • Zloader, Terdot, DELoader, ZeusSphinx

    Zloader is a malware strain that was initially discovered back in August 2015.

    trojanbotnetzloader

  • suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz

    suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz

    suricata

  • suricata: ET MALWARE Zbot POST Request to C2

    suricata: ET MALWARE Zbot POST Request to C2

    suricata

  • Blocklisted process makes network request

  • Suspicious use of SetThreadContext

  behavioral1behavioral2