Overview

overview

10

Static

static

1

PO-000001306.exe

windows7-x64

10

PO-000001306.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PO-000001306.exe

  • Size

    266KB

  • Sample

    231012-jn469aeh6y

  • MD5

    45164d575efb266e034efb0811f72111

  • SHA1

    ff40eeffa45f8d2c01cdd2efa3478031c9f2c59c

  • SHA256

    a749c3658fb75b7bf7c7d9899d48edf65a00356ebf2a1d7a14cb15de5ed647ac

  • SHA512

    d011c6c387f697e9ef0e310e9e90937707b8b53f2d8f1c55dad590927a62b5db1661ef195b8cef22203be32a2f7d76428ea1068fd53c366d1d7e61aedeecb281

  • SSDEEP

    6144:mDKW1Lgbdl0TBBvjc/Disq9mMLXIvNpwlwYJFD/bvj5:Ah1Lk70TnvjcOsCLXIvkwW

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      PO-000001306.exe

    • Size

      266KB

    • MD5

      45164d575efb266e034efb0811f72111

    • SHA1

      ff40eeffa45f8d2c01cdd2efa3478031c9f2c59c

    • SHA256

      a749c3658fb75b7bf7c7d9899d48edf65a00356ebf2a1d7a14cb15de5ed647ac

    • SHA512

      d011c6c387f697e9ef0e310e9e90937707b8b53f2d8f1c55dad590927a62b5db1661ef195b8cef22203be32a2f7d76428ea1068fd53c366d1d7e61aedeecb281

    • SSDEEP

      6144:mDKW1Lgbdl0TBBvjc/Disq9mMLXIvNpwlwYJFD/bvj5:Ah1Lk70TnvjcOsCLXIvkwW

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks