Overview

overview

10

Static

static

zeus 1_1.2...ir.exe

windows7_x64

3

zeus 1_1.2...ir.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    zeus 1_1.2.7.14.vir

  • Size

    79KB

  • Sample

    200719-31mglnxbga

  • MD5

    d00127c1b1876fec58669c2f7be41b55

  • SHA1

    a9873c847b39bb5f623f964f39eb885583a489bb

  • SHA256

    f4e66813b40d4afceab66f9a176e7098016cd7bf38e49ec886c5c09b7b3716de

  • SHA512

    d5b4ae5236db1f229ce7329ba30941a43496380c4c9afe7a4b973ea06a8ab54f918d4ae44fde5f56753e81ff2ae3f1333b137e5800f8860e016607c44f3a1f9b

Score
10/10
persistence

Malware Config

Targets

    • Target

      zeus 1_1.2.7.14.vir

    • Size

      79KB

    • MD5

      d00127c1b1876fec58669c2f7be41b55

    • SHA1

      a9873c847b39bb5f623f964f39eb885583a489bb

    • SHA256

      f4e66813b40d4afceab66f9a176e7098016cd7bf38e49ec886c5c09b7b3716de

    • SHA512

      d5b4ae5236db1f229ce7329ba30941a43496380c4c9afe7a4b973ea06a8ab54f918d4ae44fde5f56753e81ff2ae3f1333b137e5800f8860e016607c44f3a1f9b

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

1
T1004

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks