Overview

overview

10

Static

static

10

2024-10-17...ch.exe

windows7-x64

10

2024-10-17...ch.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-17_60a695cdb8dd7bab484cf4676ef0296d_snatch

  • Size

    2.7MB

  • Sample

    241017-2slvks1enf

  • MD5

    60a695cdb8dd7bab484cf4676ef0296d

  • SHA1

    63654366314bd7150e45b5ca43cf5c2d9d9d3a9c

  • SHA256

    60d1562ddf254bf40fcc2503fc2f0a78867907028f7662937221a481c3b8f33b

  • SHA512

    f6bb6505b2a1496f893f131d8d911d44ef49cfb6956196b9f954ac6d1f04729b2bdb1d8dc0e80dd3756d81e95528817d147ac7230e5e2de688347a284a90bd1e

  • SSDEEP

    24576:X4ybxkJlcXgszkiwIm9seW6sCtTlXc/ut5Mdrp7hSgsuLu5RPVeVbV2qK7zAq/Hm:F6cQsoBISsB/LujVDA0/X+

Score
10/10
zebrocybackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      2024-10-17_60a695cdb8dd7bab484cf4676ef0296d_snatch

    • Size

      2.7MB

    • MD5

      60a695cdb8dd7bab484cf4676ef0296d

    • SHA1

      63654366314bd7150e45b5ca43cf5c2d9d9d3a9c

    • SHA256

      60d1562ddf254bf40fcc2503fc2f0a78867907028f7662937221a481c3b8f33b

    • SHA512

      f6bb6505b2a1496f893f131d8d911d44ef49cfb6956196b9f954ac6d1f04729b2bdb1d8dc0e80dd3756d81e95528817d147ac7230e5e2de688347a284a90bd1e

    • SSDEEP

      24576:X4ybxkJlcXgszkiwIm9seW6sCtTlXc/ut5Mdrp7hSgsuLu5RPVeVbV2qK7zAq/Hm:F6cQsoBISsB/LujVDA0/X+

    Score
    10/10
    zebrocybackdoordiscoverytrojanupx

    • Zebrocy

      Zebrocy is a backdoor created by Sofacy threat group and has multiple variants developed in different languages.

      trojanbackdoorzebrocy

    • Zebrocy Go Variant

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks