Overview

overview

10

Static

static

523580b16e...a3.exe

windows7-x64

10

523580b16e...a3.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    523580b16e141809cb5c874e3436d5545e46d364d9d2d67cfc2758fe6a4f92a3

  • Size

    208KB

  • Sample

    220717-ea935afefj

  • MD5

    41c860f6170bfec4e64452470328df07

  • SHA1

    650ae39c8a280e864899b6ca9a0e155bf450ded2

  • SHA256

    523580b16e141809cb5c874e3436d5545e46d364d9d2d67cfc2758fe6a4f92a3

  • SHA512

    0cf116be3e1f5c73f7d820a47cdee3bcf8ed3fe30b19334cd9dbf469f442304d48b6b325fc054dee1fbd64e97c623dff7c59b6b9b7d93c0010a07f7881b25fa5

Score
10/10
persistencesuricata

Malware Config

Targets

    • Target

      523580b16e141809cb5c874e3436d5545e46d364d9d2d67cfc2758fe6a4f92a3

    • Size

      208KB

    • MD5

      41c860f6170bfec4e64452470328df07

    • SHA1

      650ae39c8a280e864899b6ca9a0e155bf450ded2

    • SHA256

      523580b16e141809cb5c874e3436d5545e46d364d9d2d67cfc2758fe6a4f92a3

    • SHA512

      0cf116be3e1f5c73f7d820a47cdee3bcf8ed3fe30b19334cd9dbf469f442304d48b6b325fc054dee1fbd64e97c623dff7c59b6b9b7d93c0010a07f7881b25fa5

    Score
    10/10
    persistencesuricata

    • suricata: ET MALWARE Zbot Generic URI/Header Struct .bin

      suricata: ET MALWARE Zbot Generic URI/Header Struct .bin

      suricata

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks