Overview

overview

10

Static

static

zeus 1_1.3...ir.exe

windows7_x64

3

zeus 1_1.3...ir.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    zeus 1_1.3.1.1.vir

  • Size

    62KB

  • Sample

    200719-7n8wxnydg2

  • MD5

    6f4f820c07e134f8ac6f7ed0d9f8567e

  • SHA1

    4699c0e95bc81681f3c2b3f5be5d51419e310bed

  • SHA256

    93e7f4109711d62264dd5c292840556786b308a5014b9ef1691bbbabf4ed9aef

  • SHA512

    cc86fa921a5e0e422b7ae603c901d7459375c75e64b5daf17fe737278d6f2f020f772ae98898734b79ba4b87da4dd7b67844c5a773cda2db193ecef2ba52b09d

Score
10/10
persistence

Malware Config

Targets

    • Target

      zeus 1_1.3.1.1.vir

    • Size

      62KB

    • MD5

      6f4f820c07e134f8ac6f7ed0d9f8567e

    • SHA1

      4699c0e95bc81681f3c2b3f5be5d51419e310bed

    • SHA256

      93e7f4109711d62264dd5c292840556786b308a5014b9ef1691bbbabf4ed9aef

    • SHA512

      cc86fa921a5e0e422b7ae603c901d7459375c75e64b5daf17fe737278d6f2f020f772ae98898734b79ba4b87da4dd7b67844c5a773cda2db193ecef2ba52b09d

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

1
T1004

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks