Extracted

• • Target

    8c293fe05b3af514723a1639810c06a3_JaffaCakes118

  • Size

    489KB

  • MD5

    8c293fe05b3af514723a1639810c06a3

  • SHA1

    ac2f7668c7f3049930b52a83585ac479145cd059

  • SHA256

    dbeba2fb33aaba42768a5ed8055cc8ca4009ad1921319f90c78b78d4f0dd9f7b

  • SHA512

    2f8db26e93c54b08944a4080e55595f348090086f849fe427f6f07b17a8a57926b1e0d6481356feb0846af0c01ffbb06122750974d3f80e2ea3c465aab1acc23

  • SSDEEP

    6144:JQL/CxaPfEDAat201QjWS1weuSMveVva7u0wugLVghTRcWVHaLhU+7bd8AoovvQ5:Ju6uEDr40M6euSMvewSSaGY2ZsYiW

  Score

  10^/10

  zloaderbot5bot5botnetpersistencetrojan

  • Zloader, Terdot, DELoader, ZeusSphinx

    Zloader is a malware strain that was initially discovered back in August 2015.

    trojanbotnetzloader

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2