Extracted

• • Target

    3f5e18655426b5ffc62d65048187dfdc_JaffaCakes118

  • Size

    276KB

  • MD5

    3f5e18655426b5ffc62d65048187dfdc

  • SHA1

    b785e3e416fe5a64dd518cefc1df2e8bb39e534e

  • SHA256

    1dda49ee9286f6c433dd46056c690d02d2e7dea1f96e01dbe148136891d01bbd

  • SHA512

    37d23977d2a36e30088a41236937b60a8b1173b44571e71213c78e9df335abfc5bbcc9986b77f508ac5dd5f61f3e0433bbbe7e11496947fa5a7378a66eefcd95

  • SSDEEP

    6144:7wKFfRUgx14SK2OyUGrHUw5JTBqmQPYUHeGgXUaOtsBV1RLA:77i+14SxCCHUwhVQAU7gkaGsb

  Score

  10^/10

  zloader10/03botnetpersistencetrojan

  • Zloader, Terdot, DELoader, ZeusSphinx

    Zloader is a malware strain that was initially discovered back in August 2015.

    trojanbotnetzloader

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2