Examples of HPsus/Zbot-C include:
Example 1
File Information
- Size
- 129K
- SHA-1
- 7ce5d5b9960c7647efdf923e109c6114733c7d1f
- MD5
- e62cbea4db485f1ebba10717ed2890ce
- CRC-32
- e975c4dc
- File type
- application/x-ms-dos-executable
- First seen
- 2010-10-15
Other vendor detection
- Avira
- TR/PSW.Zbot.1052
Runtime Analysis
Dropped Files
- c:\Documents and Settings\test user\Application Data\Siuqbo\tyhoo.exe
- Size
- 129K
- SHA-1
- 0dd20a64329eecf6ad1d9347583b0b8f80ba7584
- MD5
- 7669812dab2186532ed88f38ad771bf1
- CRC-32
- 96351ecc
- File type
- application/x-ms-dos-executable
- First seen
- 2010-10-26
Processes Created
- c:\windows\system32\cmd.exe
Example 2
File Information
- Size
- 112K
- SHA-1
- a375c71a2bde636443d80052281463abdaaa8e17
- MD5
- a1a4f466a251eecf20a77f11765d10a4
- CRC-32
- c1890d7a
- File type
- application/x-ms-dos-executable
- First seen
- 2010-10-07
Other vendor detection
- Avira
- TR/Spy.ZBot.aqrp
Runtime Analysis
Dropped Files
- c:\Documents and Settings\test user\Application Data\Ocuz\ykrye.exe
- Size
- 112K
- SHA-1
- 7bbd83ba288fec77163c86ff5edcd6461e8f8cc1
- MD5
- d9bf48cd9863e8381e6fb62c97f44478
- CRC-32
- 288b8177
- File type
- application/x-ms-dos-executable
- First seen
- 2010-10-28
Processes Created
- c:\windows\system32\cmd.exe
Example 3
File Information
- Size
- 115K
- SHA-1
- 35b4a6f59506cf7a5c015ed9e436806671ae1e2c
- MD5
- b64b598e6b5106d770f94c659bc994d5
- CRC-32
- 16b80297
- File type
- application/x-ms-dos-executable
- First seen
- 2010-10-12
Other vendor detection
- Avira
- TR/Kazy.1638.3
Runtime Analysis
Dropped Files
- c:\Documents and Settings\test user\Application Data\Suzed\opor.exe
- Size
- 115K
- SHA-1
- 2d5061d94b115e0cbaacafe798e98d5b3daa0d27
- MD5
- 8612390a0701717ffb5d65784d083367
- CRC-32
- 0ec8faab
- File type
- application/x-ms-dos-executable
- First seen
- 2010-10-28
Processes Created
- c:\windows\system32\cmd.exe