Overview

overview

10

Static

static

zeus 1_1.2...ir.exe

windows7_x64

3

zeus 1_1.2...ir.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    zeus 1_1.2.5.1.vir

  • Size

    205KB

  • Sample

    200719-54wz5yhyw2

  • MD5

    2e0c45213c4d4f40f34e71a592b696a8

  • SHA1

    fd886adc026712844eb07dfe9f59155a3ea369d4

  • SHA256

    8b5da3fc469190ecae7156e694ac61fdc4d23aa9f04e55e877c058a1e5e94b11

  • SHA512

    26b7519ac0cdc1c2010fc99f7704c2974bfc5c47526cf24e596d0a6c7cf375137e6d42b8555d097663652d3133e94c4c851c59536f05987384695e3cd41b2485

Score
10/10
persistence

Malware Config

Targets

    • Target

      zeus 1_1.2.5.1.vir

    • Size

      205KB

    • MD5

      2e0c45213c4d4f40f34e71a592b696a8

    • SHA1

      fd886adc026712844eb07dfe9f59155a3ea369d4

    • SHA256

      8b5da3fc469190ecae7156e694ac61fdc4d23aa9f04e55e877c058a1e5e94b11

    • SHA512

      26b7519ac0cdc1c2010fc99f7704c2974bfc5c47526cf24e596d0a6c7cf375137e6d42b8555d097663652d3133e94c4c851c59536f05987384695e3cd41b2485

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

1
T1004

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks