General
- Target zeus 1_1.2.7.7.vir
- Size 544KB
- Sample200719-l3mkqyjs7x
- SHA256 db64d1d2b37c5213507c63c5c664ea1108becea58a51c74e97ccc586e3e5c2fe
- MD5 dc5233175755fe742f5e448f73318d62
- SHA1 eda9a1e86820164d2b94cdd5b590284abe1be40a
- SHA512 ec6b1b7f8493bb5e3c9fcff7533cadf7c1dbce4b1eb1dc82848c498ade3db87cee9d9d49e2894eaef13102c2b48c7b3c78a094214ef56945c9f6ba114c28083b
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
zeus 1_1.2.7.7.vir.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
zeus 1_1.2.7.7.vir.exe
Resource
win10v200430
0 signatures
0 seconds
Malware Config
Targets
-
- Target zeus 1_1.2.7.7.vir
- Size 544KB
- SHA256 db64d1d2b37c5213507c63c5c664ea1108becea58a51c74e97ccc586e3e5c2fe
- MD5 dc5233175755fe742f5e448f73318d62
- SHA1 eda9a1e86820164d2b94cdd5b590284abe1be40a
- SHA512 ec6b1b7f8493bb5e3c9fcff7533cadf7c1dbce4b1eb1dc82848c498ade3db87cee9d9d49e2894eaef13102c2b48c7b3c78a094214ef56945c9f6ba114c28083b
- MD5 SHA1 SHA512
Score10/10-
Modifies WinLogon for persistence
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext