Jump to content
View in the app

A better way to browse. Learn more.
Tuts 4 You

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

Maleware selfchecking Zeus Bot

ltheonel
ltheonel
in Malware Reverse Engineering

Featured Replies

Posted

Since noboy is interested, thread can be deleted please.

zbot.zip

Edited by ltheonel
Attached sample to post...

  • Author

ATTENTION: THIS IS A MALEWARE SAMPLE AND EXECUTION/ANALYSING IS ON OWN RISK!!!!!!!!!

Hello, i got this Zeus bot sample this should connect to your local lan, there seems to be some selfchecking done inside it, that i dont understand.

I obscured it with a simple crypter to analyse behavior but failed.

If you have some interest tips for me just post, doing research now maybe a week :(

You can break befor execution of resumethread and manipulate the entry of new created process thats where the maleware got deobfuscated in first layer.

this is bot samlpe:

crypted.bot:http://www.mediafire.com/?qryeecrg3j3se3c

uncrypted.bot:http://www.mediafire.com/?idcx6gy3xmntd3j

ATTENTION: THIS IS A MALEWARE SAMPLE AND EXECUTION/ANALYSING IS ON OWN RISC!!!!!!!!!

  • 3 weeks later...

Is it looking for specific processes before injection?

What is the password to the archive?

Ted.

Create an account or sign in to comment

Go to topic listing

Configure browser push notifications
Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.