Overview

overview

10

Static

static

490aeb8ce4...e1.exe

windows7_x64

10

490aeb8ce4...e1.exe

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    490aeb8ce4b544f6edbf0f6c84bb808fb3023b9f7f8283cb101b82783b36cce1

  • Size

    138KB

  • Sample

    220714-beqcqshhb9

  • MD5

    5b1e1e909a6efca6cabc0fad8a0458a6

  • SHA1

    243b45c2f3d4a0dbe53fe3e5884ec72dc2f29664

  • SHA256

    490aeb8ce4b544f6edbf0f6c84bb808fb3023b9f7f8283cb101b82783b36cce1

  • SHA512

    08d5cc20707e673186cb42651c4d3118848a7d4826ae5bc0a690afbb010c00788180d0ea689917d71d922fb73a5a47cd861ed851efd565c1cfbddee5b3e8bf1e

Score
10/10
persistencesuricata

Malware Config

Targets

    • Target

      490aeb8ce4b544f6edbf0f6c84bb808fb3023b9f7f8283cb101b82783b36cce1

    • Size

      138KB

    • MD5

      5b1e1e909a6efca6cabc0fad8a0458a6

    • SHA1

      243b45c2f3d4a0dbe53fe3e5884ec72dc2f29664

    • SHA256

      490aeb8ce4b544f6edbf0f6c84bb808fb3023b9f7f8283cb101b82783b36cce1

    • SHA512

      08d5cc20707e673186cb42651c4d3118848a7d4826ae5bc0a690afbb010c00788180d0ea689917d71d922fb73a5a47cd861ed851efd565c1cfbddee5b3e8bf1e

    Score
    10/10
    persistencesuricata

    • suricata: ET MALWARE Possible Zbot Activity Common Download Struct

      suricata: ET MALWARE Possible Zbot Activity Common Download Struct

      suricata

    • suricata: ET MALWARE Zbot Generic URI/Header Struct .bin

      suricata: ET MALWARE Zbot Generic URI/Header Struct .bin

      suricata

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks