Extracted

• • Target

    0b61ae1202d964bea67cea9d663c8530b11c1268bcea9439b949e669b3b3be7c

  • Size

    251KB

  • MD5

    3e68a003922b9c94a660a2e696869d17

  • SHA1

    a1ed31293acf35e8b9854393b9329b9874fda09c

  • SHA256

    0b61ae1202d964bea67cea9d663c8530b11c1268bcea9439b949e669b3b3be7c

  • SHA512

    d686028dad79b9514a7547ffaa2f8b7cc6cd8aeba413721b2ab0571997d59eaf01e4397657c228ac6152bd8be567cf929692b7e5f7d4bdfd0960e01c28e63b20

  Score

  10^/10

  zloaderdllobnovaalisabotnetpersistencetrojan

  • Zloader, Terdot, DELoader, ZeusSphinx

    Zloader is a malware strain that was initially discovered back in August 2015.

    trojanbotnetzloader

  • Sets service image path in registry

    persistence

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2