General

  • Target
    jaffacakes118_Trojan-Spy.Win32.Zbot.vyyr.ba3fdb87983ef6e68de3851db66f2cf0
  • Size 314KB
  • Sample261016-df1wzagv4m
  • SHA256 8d8f974127d93c9e5894a2097c4496669e821ab0e6f7a0d9f4f4c6c56afe6048
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_Trojan-Spy.Win32.Zbot.vyyr.ba3fdb87983ef6e68de3851db66f2cf0
    • Size 314KB
    • SHA256 8d8f974127d93c9e5894a2097c4496669e821ab0e6f7a0d9f4f4c6c56afe6048
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Citadel payload

    • Family: Citadel

      Citadel is a trojan and botnet written in C.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks