Zloader Learns Old Tricks
Essential information
- Published
- 30/04/2024 14:41
- Modified
- 01/05/2024 23:09
- Tags
- anti-analysis python windows registry zeus zloader
- Related entities
- 8 observables, 1 intrusion sets (apt), 20 techniques (mitre), 1 malware
Description
Zloader (a.k.a. Terdot, DELoader, or Silent Night) is a modular trojan based on leaked ZeuS source code. Zloader has continued to evolve since its resurrection around September 2023 after an almost two-year hiatus. The latest version, 2.4.1.0, introduces a feature to prevent execution on machines that differ from the original infection. This anti-analysis technique was present in the original ZeuS 2.X code but implemented differently.