Overview

overview

10

Static

static

3

dridex

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5b2795a54022072d665053f035d1d5968469788df0ee9e9a6779eba7bf20232e

  • Size

    9KB

  • Sample

    231031-xedjtsee87

  • MD5

    204d271af0784b3f3e7c6a3db821aac6

  • SHA1

    74ca925e874d9b439b686b3801efda078a9729b3

  • SHA256

    5b2795a54022072d665053f035d1d5968469788df0ee9e9a6779eba7bf20232e

  • SHA512

    0c4d761a424a500898956f950d9524d56a9b068fb829ff85ac2ce4aa35c790b139936611496d44fe857f521eb7df4e51bb9f58acc31a491deab5e231e0dfa403

  • SSDEEP

    192:8JL6vyfIyRPoCJm38NYSacP6Ky54vPM2CX:8ZOyQVYu8jacCY32

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      5b2795a54022072d665053f035d1d5968469788df0ee9e9a6779eba7bf20232e

    • Size

      9KB

    • MD5

      204d271af0784b3f3e7c6a3db821aac6

    • SHA1

      74ca925e874d9b439b686b3801efda078a9729b3

    • SHA256

      5b2795a54022072d665053f035d1d5968469788df0ee9e9a6779eba7bf20232e

    • SHA512

      0c4d761a424a500898956f950d9524d56a9b068fb829ff85ac2ce4aa35c790b139936611496d44fe857f521eb7df4e51bb9f58acc31a491deab5e231e0dfa403

    • SSDEEP

      192:8JL6vyfIyRPoCJm38NYSacP6Ky54vPM2CX:8ZOyQVYu8jacCY32

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks