General
- Target jaffacakes118_Trojan-Spy.Win32.Zbot.vyyr.ba3fdb87983ef6e68de3851db66f2cf0
- Size 314KB
- Sample261016-df1wzagv4m
- SHA256 8d8f974127d93c9e5894a2097c4496669e821ab0e6f7a0d9f4f4c6c56afe6048
- MD5 ba3fdb87983ef6e68de3851db66f2cf0
- SHA1 76160898f6e204aabd63209c46ece3c7c426d2d2
- SHA512 c34353791531a722c27f504b5978b20ae2b64a5aedb7e91a6bd5e3f224fb702eaaf11a59a8980bbde99cc5c20e45899c9a4c8449afc45e7f3d38102b3ce4d9c1
- SSDEEP 6144:gB2Mq6dGjQViXPguzf1o17SgO8VYANS/J63xyxlfugo:gBB1Vcoi+1ugPVM/UBolfNo
- TLSH T10464E18568873C37D593C9BBE91AD8F06B40752F5A43C012EA5A250D2963CDCBEDCBC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Spy.Win32.Zbot.vyyr.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Spy.Win32.Zbot.vyyr.ba3fdb87983ef6e68de3851db66f2cf0
- Size 314KB
- SHA256 8d8f974127d93c9e5894a2097c4496669e821ab0e6f7a0d9f4f4c6c56afe6048
- MD5 ba3fdb87983ef6e68de3851db66f2cf0
- SHA1 76160898f6e204aabd63209c46ece3c7c426d2d2
- SHA512 c34353791531a722c27f504b5978b20ae2b64a5aedb7e91a6bd5e3f224fb702eaaf11a59a8980bbde99cc5c20e45899c9a4c8449afc45e7f3d38102b3ce4d9c1
- SSDEEP 6144:gB2Mq6dGjQViXPguzf1o17SgO8VYANS/J63xyxlfugo:gBB1Vcoi+1ugPVM/UBolfNo
- TLSH T10464E18568873C37D593C9BBE91AD8F06B40752F5A43C012EA5A250D2963CDCBEDCBC6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Citadel payload
-
Suspicious use of SetThreadContext