Gameover ZeuS Jumps on the Bitcoin Bandwagon

We’re always asking our analysts the following question: seen anything interesting? And yesterday, the answer to our query was this: Gameover ZeuS has some additional strings.

Very interesting, indeed.

Here’s a screenshot of the decrypted strings:

  •  aBitcoinQt_exe
  •  aBitcoind_exe
  •  aWallet_dat
  •  aBitcoinWallet
  •  aBitcoinWalle_0

Bitcoin wallet stealing has really moved up from the bush leagues. Gameover ZeuS is a pro.

Analysis is ongoing.

Here’s the SHA1: 657b1dd40a4addc1a6da0fb50ee6e325fff84dc4

Analysis by — Mikko Suominen

On 14/03/14 At 11:14 AM

Read more: Gameover ZeuS Jumps on the Bitcoin Bandwagon