Overview
overview
10Static
static
7webinjects.js
windows7-x64
3webinjects.js
windows10-2004-x64
3zsb.exe
windows7-x64
7zsb.exe
windows10-2004-x64
7server[php]/cp.js
windows7-x64
3server[php]/cp.js
windows10-2004-x64
3server[php...ass.js
windows7-x64
3server[php...ass.js
windows10-2004-x64
3server[php..._db.js
windows7-x64
3server[php..._db.js
windows10-2004-x64
3server[php...les.js
windows7-x64
3server[php...les.js
windows10-2004-x64
3server[php...r.html
windows7-x64
3server[php...r.html
windows10-2004-x64
3server[php...r.html
windows7-x64
3server[php...r.html
windows10-2004-x64
3server[php...ex.ps1
windows7-x64
3server[php...ex.ps1
windows10-2004-x64
3server[php...enu.js
windows7-x64
3server[php...enu.js
windows10-2004-x64
3server[php...l.html
windows7-x64
3server[php...l.html
windows10-2004-x64
3Builder.Pa...cts.js
windows7-x64
3Builder.Pa...cts.js
windows10-2004-x64
3Builder.Pa...us.exe
windows7-x64
10Builder.Pa...us.exe
windows10-2004-x64
10Builder.Panel/zsb.exe
windows7-x64
7Builder.Panel/zsb.exe
windows10-2004-x64
7Analysis
-
max time kernel
141s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240730-en -
resource tags
arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system -
submitted
28-07-2024 23:26
Behavioral task
behavioral1
Sample
webinjects.js
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
webinjects.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral3
Sample
zsb.exe
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
zsb.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral5
Sample
server[php]/cp.js
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
server[php]/cp.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral7
Sample
server[php]/system/jabberclass.js
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
server[php]/system/jabberclass.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral9
Sample
server[php]/system/reports_db.js
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
server[php]/system/reports_db.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral11
Sample
server[php]/system/reports_files.js
Resource
win7-20240729-en
Behavioral task
behavioral12
Sample
server[php]/system/reports_files.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral13
Sample
server[php]/theme/footer.html
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
server[php]/theme/footer.html
Resource
win10v2004-20240730-en
Behavioral task
behavioral15
Sample
server[php]/theme/header.html
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
server[php]/theme/header.html
Resource
win10v2004-20240730-en
Behavioral task
behavioral17
Sample
server[php]/theme/index.ps1
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
server[php]/theme/index.ps1
Resource
win10v2004-20240730-en
Behavioral task
behavioral19
Sample
server[php]/theme/popupmenu.js
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
server[php]/theme/popupmenu.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral21
Sample
server[php]/theme/small.html
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
server[php]/theme/small.html
Resource
win10v2004-20240730-en
Behavioral task
behavioral23
Sample
Builder.Panel/webinjects.js
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
Builder.Panel/webinjects.js
Resource
win10v2004-20240730-en
Behavioral task
behavioral25
Sample
Builder.Panel/zeus.exe
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
Builder.Panel/zeus.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral27
Sample
Builder.Panel/zsb.exe
Resource
win7-20240708-en
General
-
Target
zsb.exe
-
Size
114KB
-
MD5
ea67f30e34edf7dfedc4e97c44adc6d5
-
SHA1
5ff147bf41ec70d13867663bd868042dd621711b
-
SHA256
6faf23e09610b497b4e54a17fb0a8679979b937ed04a123b9d9f99993302e9eb
-
SHA512
8912f75e2d4c67aaa6eb30d3653974edc11910540b172a4abf1936583e26a7dd2b47458d07f9f28d772b0c39ab0a2e2fb5593bef9e7e5a3c5f9b873896a34a07
-
SSDEEP
1536:TGKnRy4DLShqDz7jy7g/wahvET/IZGsjqCV92kpwRqZreyBTzd:TxRy4DLrnGgYSEccmL2I5B/d
Malware Config
Signatures
-
Processes:
resource yara_rule behavioral4/memory/2720-0-0x0000000000400000-0x000000000043C000-memory.dmp upx behavioral4/memory/2720-1-0x0000000000400000-0x000000000043C000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
zsb.exedescription ioc process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language zsb.exe