Overview

overview

10

Static

static

3

c94708145f...b5.exe

windows7-x64

10

c94708145f...b5.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    c94708145f940c2984237131a8c947347aa65149600a4c58c5f7d5ae9353efb5

  • Size

    1.7MB

  • Sample

    231012-mxhldsgb59

  • MD5

    54e9014aa9bf6e7ce2f134c5fea3324f

  • SHA1

    6f904e8e6e48c19419dc122d7db8b00143c78d57

  • SHA256

    c94708145f940c2984237131a8c947347aa65149600a4c58c5f7d5ae9353efb5

  • SHA512

    5b98d87af42c518c735daec5042d2194b78e2e185a521d0c6758bc36c6c01dc289a3a3e7b24a590974a4086c77a7c6dfd0b59c112b6132f1c7e22e3bffa78ee5

  • SSDEEP

    24576:rQa+rRep38knZGbO4oFya8ZbRxaiXvnEc3Suvb7sNPwEFfTPCRi4Vz:rZ+rRe3zn4ioa8ZbRMiXO07sNPwERWV

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      c94708145f940c2984237131a8c947347aa65149600a4c58c5f7d5ae9353efb5

    • Size

      1.7MB

    • MD5

      54e9014aa9bf6e7ce2f134c5fea3324f

    • SHA1

      6f904e8e6e48c19419dc122d7db8b00143c78d57

    • SHA256

      c94708145f940c2984237131a8c947347aa65149600a4c58c5f7d5ae9353efb5

    • SHA512

      5b98d87af42c518c735daec5042d2194b78e2e185a521d0c6758bc36c6c01dc289a3a3e7b24a590974a4086c77a7c6dfd0b59c112b6132f1c7e22e3bffa78ee5

    • SSDEEP

      24576:rQa+rRep38knZGbO4oFya8ZbRxaiXvnEc3Suvb7sNPwEFfTPCRi4Vz:rZ+rRe3zn4ioa8ZbRMiXO07sNPwERWV

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks