Win32/Zeus (alias Zbot)

Forum for analysis and discussion about malware.
mikuś
Banned
Posts: 7
Joined: Mon Sep 24, 2012 11:26 am

Re: Malware Requests, part 2

Post by mikuś » Sun Oct 21, 2012 1:32 pm

MD5: 94d93d88763f13da417faeb1035fa482

nex
Posts: 14
Joined: Fri Aug 06, 2010 8:09 am
Contact:

Re: Malware Requests, part 2

Post by nex » Mon Oct 22, 2012 6:31 am

mikuś wrote:MD5: 94d93d88763f13da417faeb1035fa482
Attached.
You do not have the required permissions to view the files attached to this post.

Win32:Virut
Posts: 324
Joined: Sat Jun 02, 2012 2:22 pm

Re: Trojan Zeus (alias ZBot)

Post by Win32:Virut » Fri Oct 26, 2012 5:11 pm

75 samples!
File is too big, uploaded here: http://www39.zippyshare.com/v/31648491/file.html

password is "infected" without quotes

User avatar
EP_X0FF
Global Moderator
Posts: 4872
Joined: Sun Mar 07, 2010 5:35 am
Location: Russian Federation
Contact:

Re: Trojan Zeus (alias ZBot)

Post by EP_X0FF » Sat Oct 27, 2012 2:56 am

Win32:Virut wrote:75 samples!
File is too big, uploaded here: http://www39.zippyshare.com/v/31648491/file.html

password is "infected" without quotes
Split on 2M and attached additionally. Pass the same.
You do not have the required permissions to view the files attached to this post.
Ring0 - the source of inspiration

Win32:Virut
Posts: 324
Joined: Sat Jun 02, 2012 2:22 pm

Re: Trojan Zeus (alias ZBot)

Post by Win32:Virut » Wed Oct 31, 2012 9:09 pm

40 Samples

File is too big and I have problems with splitting, uploaded here: http://www10.zippyshare.com/v/67973546/file.html

Password is "infected" without quotes

Win32:Virut
Posts: 324
Joined: Sat Jun 02, 2012 2:22 pm

Re: Trojan Zeus (alias ZBot)

Post by Win32:Virut » Wed Nov 14, 2012 9:07 am

94 Samples

I don't checked all samples, but most of them should be Zeus/ZBot.

I created parts, but I can't attach 001, 002 etc. files.

Uploaded here:

ZbotPack.zip.001
ZbotPack.zip.002
ZbotPack.zip.003
ZbotPack.zip.004
ZbotPack.zip.005
ZbotPack.zip.006
ZbotPack.zip.007

gritland
Posts: 31
Joined: Tue May 11, 2010 10:57 am

Re: Trojan Zeus (alias ZBot)

Post by gritland » Thu Nov 15, 2012 9:55 pm

https://www.virustotal.com/file/4655842 ... 353016141/
SHA1: a0df17b68ee5dd2a7342238e8bbd5f6cbd888bb7
MD5: 6b211e33b4b6589f524df374c27e75f2
You do not have the required permissions to view the files attached to this post.

User avatar
Xylitol
Global Moderator
Posts: 1671
Joined: Sat Apr 10, 2010 5:54 pm
Location: Seireitei, Soul Society
Contact:

Re: Trojan Zeus (alias ZBot)

Post by Xylitol » Mon Nov 19, 2012 8:43 am

IceIX builder and webpanel in attach.
https://www.virustotal.com/file/6840766 ... 353314596/
You do not have the required permissions to view the files attached to this post.

User avatar
Xylitol
Global Moderator
Posts: 1671
Joined: Sat Apr 10, 2010 5:54 pm
Location: Seireitei, Soul Society
Contact:

Re: Trojan Zeus (alias ZBot)

Post by Xylitol » Tue Nov 27, 2012 5:00 pm

You do not have the required permissions to view the files attached to this post.

Win32:Virut
Posts: 324
Joined: Sat Jun 02, 2012 2:22 pm

Re: Trojan Zeus (alias ZBot)

Post by Win32:Virut » Wed Nov 28, 2012 6:49 pm

44 samples.
You do not have the required permissions to view the files attached to this post.

Post Reply