Extracted

• • Target

    Nicht bestätigt 200172.crdownload

  • Size

    137KB

  • MD5

    c98ad59cd4dbc9b65da06bb61a475b3c

  • SHA1

    13f1c20297babdbc192c0096384f09d304bcb6a0

  • SHA256

    fa1262ddbc3380f866cf3a8d7f0a72e335a9dedcf2c857fde08aae543e2fea78

  • SHA512

    0ccf064b78473ec8caa0cf9dc93371a8ada795474bc1568aefa49061d3f17ea1d5424617b8b7b6bf2bc52676d8cd9e66af3dd39a329c6bc0ab10f68a66acd14f

  • SSDEEP

    1536:F+sxde4Mi3mI2hb7KZ18C2NGkikGkFjGkikGkKEt0eEKU+kCKGWGPrbrbTDDpOAH:PxdeBQFJy

  Score

  10^/10

  zgratrat

  • Detect ZGRat V1

  • ZGRat

    ZGRat is remote access trojan written in C#.

    ratzgrat

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2