Citadel (Zeus clone)
- Xylitol
- Global Moderator
- Posts: 1652
- Joined: Sat Apr 10, 2010 5:54 pm
- Location: Seireitei, Soul Society
- Contact:
Citadel (Zeus clone)
Citadel samples by version:
Citadel 1.3.4.0
Citadel 1.3.4.5
Citadel 1.3.5.1
Citadel 1.2.0.0
Citadel 3.1.0.0
Atmos 0.0.1.1
Related materials:
Backdoor.Citadel.BkCnct
Hacktool.Citadel.Builder
Troj.ZbotPHP-A
Microsoft lawsuit against Citadel botherders: >>146519568
For 1.2.0.0 and 3.1.0.0 those are *private* version of Citadel, if you look for ressources:
S21Sec: Citadel hasn't gone
S21sec: Citadel "involution"
S21sec: Zeus-Я-uS
S21sec: ZeuS timeline 2
Hexacorn: Zeus trivia
Atmos, version 0.0.1.0 and 0.0.1.1:
JPCERT: Banking Trojan “Citadel” Returns
Citadel 1.3.4.0
Citadel 1.3.4.5
Citadel 1.3.5.1
Citadel 1.2.0.0
Citadel 3.1.0.0
Atmos 0.0.1.1
Related materials:
Backdoor.Citadel.BkCnct
Hacktool.Citadel.Builder
Troj.ZbotPHP-A
Microsoft lawsuit against Citadel botherders: >>146519568
For 1.2.0.0 and 3.1.0.0 those are *private* version of Citadel, if you look for ressources:
S21Sec: Citadel hasn't gone
S21sec: Citadel "involution"
S21sec: Zeus-Я-uS
S21sec: ZeuS timeline 2
Hexacorn: Zeus trivia
Atmos, version 0.0.1.0 and 0.0.1.1:
JPCERT: Banking Trojan “Citadel” Returns
Re: Citadel (Zeus clone)
Im interested in a sample too
- Xylitol
- Global Moderator
- Posts: 1652
- Joined: Sat Apr 10, 2010 5:54 pm
- Location: Seireitei, Soul Society
- Contact:
Re: Citadel (Zeus clone)
Sample old ~15 Jan
You do not have the required permissions to view the files attached to this post.
Re: Citadel (Zeus clone)
Thanks!
Xylitol wrote:Sample old ~15 Jan
Re: Citadel (Zeus clone)
Thank youXylitol wrote:Sample old ~15 Jan

Re: Citadel (Zeus clone)
omroepzeeland.nl briefly served Citadel through its frontpage (via java exploit).
http://nos.nl/artikel/356996-site-omroe ... keerd.html
Find fresh sample attached.
https://www.virustotal.com/file/e7256e3 ... /analysis/
http://nos.nl/artikel/356996-site-omroe ... keerd.html
Find fresh sample attached.
https://www.virustotal.com/file/e7256e3 ... /analysis/
You do not have the required permissions to view the files attached to this post.
Erik Loman [HitmanPro]
SurfRight B.V. - www.surfright.com
SurfRight B.V. - www.surfright.com
- EP_X0FF
- Global Moderator
- Posts: 4775
- Joined: Sun Mar 07, 2010 5:35 am
- Location: Russian Federation
- Contact:
Re: Citadel (Zeus clone)
Ring0 - the source of inspiration
- Xylitol
- Global Moderator
- Posts: 1652
- Joined: Sat Apr 10, 2010 5:54 pm
- Location: Seireitei, Soul Society
- Contact:
Re: Citadel (Zeus clone)







Code: Select all
http://188.162.10.19/cp.php?m=login
http://188.162.10.19/file.php
http://188.162.10.19/api.php
http://188.162.10.19/gate.php
http://188.162.10.19/theme/style.css
http://188.162.10.19/theme/images/citadel.jpg
http://188.162.10.19/images/
http://188.162.10.19/files/
http://188.162.10.19/public/
http://188.162.10.19/system/