Search/Zebrocy
● Malware

Zebrocy

Zebrocy is a Trojan that has been used by APT28 since at least November 2015. The malware comes in several programming language variants, including C++, Delphi, AutoIt, C#, VB.NET, and Golang.

View graph Watch Export
Indicators tracked
0
Intelligence Reports60
60 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium
Connections
32 relationships
T1053.005: Scheduled Task
source
T1047: Windows Management Instrumentation
source
T1113: Screen Capture
source
T1033: System Owner/User Discovery
source
T1132.001: Standard Encoding
source
T1074.001: Local Data Staging
source
T1119: Automated Collection
source
T1135: Network Share Discovery
source
T1120: Peripheral Device Discovery
source
T1082: System Information Discovery
source
T1140: Deobfuscate/Decode Files or Information
source
T1560: Archive Collected Data
source
T1071.003: Mail Protocols
source
T1555.003: Credentials from Web Browsers
source
T1016: System Network Configuration Discovery
source
T1083: File and Directory Discovery
source
T1049: System Network Connections Discovery
source
T1057: Process Discovery
source
T1041: Exfiltration Over C2 Channel
source
T1547.001: Registry Run Keys / Startup Folder
source
T1573.002: Asymmetric Cryptography
source
T1012: Query Registry
source
T1059.003: Windows Command Shell
source
T1070.004: File Deletion
source
T1027.002: Software Packing
source
T1071.001: Web Protocols
source
T1105: Ingress Tool Transfer
source
T1037.001: Logon Script (Windows)
source
T1680: Local Storage Discovery
source
T1124: System Time Discovery
source
T1056.004: Credential API Hooking
source