Overview

overview

10

Static

static

10

CC58D15BB2...6E.exe

windows7-x64

10

CC58D15BB2...6E.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    CC58D15BB250BABCC1D00CDD8B4CC26E.exe

  • Size

    4.3MB

  • Sample

    231104-db6lnaeb22

  • MD5

    cc58d15bb250babcc1d00cdd8b4cc26e

  • SHA1

    814e6839c3755769a35a9cfa701c0253ffb6332d

  • SHA256

    bd4e2dd3ffc3977b2ca8f818c2e51c421a1f4772b4fe11a1aa8448dc50fddab2

  • SHA512

    98755ff5e7f53aa89e9c112a24e5abac823513063e171ab4b6fce0de188585144e9181dd825206bc4f57d72fc94a431bc98da99a34ee2f6f909ebc62a14603fb

  • SSDEEP

    49152:5nYkDZzfHgXfaFZgqtosqjZYdEUco2UgLa+Q66ou2kegyJ2Uf/Ubfg:5nDzfHOi/qAczrhQ9qJp8g

Score
10/10
zgratratspyware

Malware Config

Targets

    • Target

      CC58D15BB250BABCC1D00CDD8B4CC26E.exe

    • Size

      4.3MB

    • MD5

      cc58d15bb250babcc1d00cdd8b4cc26e

    • SHA1

      814e6839c3755769a35a9cfa701c0253ffb6332d

    • SHA256

      bd4e2dd3ffc3977b2ca8f818c2e51c421a1f4772b4fe11a1aa8448dc50fddab2

    • SHA512

      98755ff5e7f53aa89e9c112a24e5abac823513063e171ab4b6fce0de188585144e9181dd825206bc4f57d72fc94a431bc98da99a34ee2f6f909ebc62a14603fb

    • SSDEEP

      49152:5nYkDZzfHgXfaFZgqtosqjZYdEUco2UgLa+Q66ou2kegyJ2Uf/Ubfg:5nDzfHOi/qAczrhQ9qJp8g

    Score
    10/10
    zgratratspyware

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Loads dropped DLL

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks