Overview

overview

8

Static

static

zeusaes_2....ir.exe

windows7_x64

8

zeusaes_2....ir.exe

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    zeusaes_2.9.6.1.vir

  • Size

    198KB

  • Sample

    200719-zpzdsyrdr2

  • MD5

    e23bae43915a338ad4de3e90547f10f3

  • SHA1

    a94c136beeedfc6d92b6a51b33a9bd2bbb538de4

  • SHA256

    4e49f5147939257640ba4990f520c9dbe355c83b73d9deadfc8505c4a09f931d

  • SHA512

    30f5dd336a4e802398b009407d78bbb992fb291c46dc2bb7621b43c4853d8b099c909299544534a4b06759f3eb590d2d3eae23123b6d053b68dcc8c6d16ce19c

Score
8/10
persistence

Malware Config

Targets

    • Target

      zeusaes_2.9.6.1.vir

    • Size

      198KB

    • MD5

      e23bae43915a338ad4de3e90547f10f3

    • SHA1

      a94c136beeedfc6d92b6a51b33a9bd2bbb538de4

    • SHA256

      4e49f5147939257640ba4990f520c9dbe355c83b73d9deadfc8505c4a09f931d

    • SHA512

      30f5dd336a4e802398b009407d78bbb992fb291c46dc2bb7621b43c4853d8b099c909299544534a4b06759f3eb590d2d3eae23123b6d053b68dcc8c6d16ce19c

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks