Overview

overview

10

Static

static

10

setup.exe

windows7-x64

10

setup.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    setup.exe

  • Size

    978KB

  • Sample

    240103-ml33yscfem

  • MD5

    34371c7833c38fa441316f238961d9a2

  • SHA1

    74e99094f77642ef2d803188121a9c61e73139fe

  • SHA256

    444b77c224199fbcb8e1241f999ea02b68e5cee7d74f262c160ae45d85cf1105

  • SHA512

    aba20341168f6f78cecb302c1544ad617a6dc4d5e081cb3ffbcfe0e67c9a5708ce7e9d264de78eb620c3acea19cf37789f25a48dbb080ed16542ccc4b780386a

  • SSDEEP

    24576:VoyOrimyU/MAYycTwgadEhiU8BnM4XkEJ:CNyU/LYyQwdU8RkE

Score
10/10
ekanszebrocybackdoorspywarestealertrojanupx

Malware Config

Targets

    • Target

      setup.exe

    • Size

      978KB

    • MD5

      34371c7833c38fa441316f238961d9a2

    • SHA1

      74e99094f77642ef2d803188121a9c61e73139fe

    • SHA256

      444b77c224199fbcb8e1241f999ea02b68e5cee7d74f262c160ae45d85cf1105

    • SHA512

      aba20341168f6f78cecb302c1544ad617a6dc4d5e081cb3ffbcfe0e67c9a5708ce7e9d264de78eb620c3acea19cf37789f25a48dbb080ed16542ccc4b780386a

    • SSDEEP

      24576:VoyOrimyU/MAYycTwgadEhiU8BnM4XkEJ:CNyU/LYyQwdU8RkE

    Score
    10/10
    zebrocybackdoorspywarestealertrojanupx

    • Zebrocy

      Zebrocy is a backdoor created by Sofacy threat group and has multiple variants developed in different languages.

      trojanbackdoorzebrocy

    • Zebrocy Go Variant

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks