Win32/Zeus (alias Zbot)

Forum for analysis and discussion about malware.
Post Reply
User avatar
EP_X0FF
Global Moderator
Posts: 4792
Joined: Sun Mar 07, 2010 5:35 am
Location: Russian Federation
Contact:

Re: banker trojan

Post by EP_X0FF » Thu Nov 24, 2011 2:27 pm

markusg wrote:3358d262-160d5c93
MD5   : ca1f26cd94ec1b34dfac7a5c96759f15
https://www.virustotal.com/file-scan/re ... 1322143069
PWS Zbot
Posts moved.
Ring0 - the source of inspiration

markusg
Posts: 730
Joined: Mon Mar 15, 2010 2:53 pm

Re: Trojan Zeus (alias ZBot)

Post by markusg » Fri Dec 16, 2011 4:12 pm

AcroFF0.dll
MD5 : 8a11bc733e59027f4ecac2443f95ef94
http://www.virustotal.com/file-scan/rep ... 1324050175
AcroFF059.dll
MD5 : b1b919578de0c06a6fd558a85d727405
http://www.virustotal.com/file-scan/rep ... 1324050248
AcroFF0590.dll
MD5 : 8fa0b6d1dfbf2e651f35b33e273c243b
https://www.virustotal.com/file-scan/re ... 1324050626
there are more dlls will not upload all
appconf32.exe
http://www.virustotal.com/file-scan/rep ... 1324050925
MD5 : e0d9b3942fb0d910d95d4c1a2ab5d73d
You do not have the required permissions to view the files attached to this post.

User avatar
rkhunter
Posts: 1150
Joined: Mon Mar 15, 2010 12:51 pm
Location: Russian Federation
Contact:

Re: Trojan Zeus (alias ZBot)

Post by rkhunter » Mon Jan 02, 2012 11:02 am

One more Zeus dropper - PWS:Win32/Zbot.gen!Y

VT Link
You do not have the required permissions to view the files attached to this post.

User avatar
rkhunter
Posts: 1150
Joined: Mon Mar 15, 2010 12:51 pm
Location: Russian Federation
Contact:

Re: Trojan Zeus (alias ZBot)

Post by rkhunter » Thu Jan 05, 2012 2:04 pm

PWS:Win32/Zbot

MD5: ba5e120b64d88a8a27ee41a45ed5bab9

14/43 >> 32.6%
You do not have the required permissions to view the files attached to this post.

User avatar
rkhunter
Posts: 1150
Joined: Mon Mar 15, 2010 12:51 pm
Location: Russian Federation
Contact:

Re: Trojan Zeus (alias ZBot)

Post by rkhunter » Tue Jan 10, 2012 6:15 am

Told that Zeus spreads via new phishing scheme. http://www.fbi.gov/news/stories/2012/ja ... are_010612

User avatar
rkhunter
Posts: 1150
Joined: Mon Mar 15, 2010 12:51 pm
Location: Russian Federation
Contact:

Re: Trojan Zeus (alias ZBot)

Post by rkhunter » Wed Jan 11, 2012 8:31 am

12/43 >> 27.9%

MD5: b6a01b34d92c06c923b40715283f0045
You do not have the required permissions to view the files attached to this post.

User avatar
rkhunter
Posts: 1150
Joined: Mon Mar 15, 2010 12:51 pm
Location: Russian Federation
Contact:

Re: Trojan Zeus (alias ZBot)

Post by rkhunter » Thu Jan 19, 2012 6:47 am

Zeus

MD5: 2a2d893733d931cedd7890730eec8225
7/43
You do not have the required permissions to view the files attached to this post.

User avatar
EX!
Posts: 35
Joined: Wed Jun 29, 2011 8:24 pm
Contact:

Re: Trojan Zeus (alias ZBot)

Post by EX! » Fri Jan 20, 2012 2:52 pm

Win32.Zbot

SHA256: 5561d7d47841790264b180a647eaa69919bf9f0d0d65a4b2984b8285dd74192a
Detection ratio: 11 / 43

https://www.virustotal.com/file/5561d7d ... 327070845/



:D
You do not have the required permissions to view the files attached to this post.

User avatar
rkhunter
Posts: 1150
Joined: Mon Mar 15, 2010 12:51 pm
Location: Russian Federation
Contact:

Re: Trojan Zeus (alias ZBot)

Post by rkhunter » Thu Jan 26, 2012 6:53 am

34 samples
You do not have the required permissions to view the files attached to this post.

User avatar
rkhunter
Posts: 1150
Joined: Mon Mar 15, 2010 12:51 pm
Location: Russian Federation
Contact:

Re: Trojan Zeus (alias ZBot)

Post by rkhunter » Tue Jan 31, 2012 1:50 pm

41 samples
You do not have the required permissions to view the files attached to this post.

Post Reply