Extracted

• • Target

    zloader 2_1.0.4.0.vir

  • Size

    300KB

  • MD5

    81baef090e5c513c1598c348d072ce96

  • SHA1

    d5795f51ec36ee0dabd073f694692e2aa507a04a

  • SHA256

    28e752ad86f8f53773bb2e147c1366f5e82b5a8fd2cd80af065decea2e11f694

  • SHA512

    699b797857f33e6937b2655418509d63d87fe18bd790d94c31a611d45b322aa2923d8be1c1df3e8c66ea7e78b93b693f7f366a38eb6b6ea6a4016a1364665520

  • SSDEEP

    6144:ODRRTytCG2AD+dMLtfbPM+jf5nde+zDbf+qk7w:zCG2AKdMDPMMff+qkk

  Score

  10^/10

  zloader19botnetpersistencetrojan

  • Zloader, Terdot, DELoader, ZeusSphinx

    Zloader is a malware strain that was initially discovered back in August 2015.

    trojanbotnetzloader

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2