General
-
Target
986b605ca83fdacdc1b5ef42e40ad028b54d6a4e05b523b8b3bf1bcc87a0163a
-
Size
11.9MB
-
MD5
c7fd7edbb15b077fe830a5628aa1c257
-
SHA1
2bba5c3842c570a6a6a18ee7e48263a8719e1861
-
SHA256
986b605ca83fdacdc1b5ef42e40ad028b54d6a4e05b523b8b3bf1bcc87a0163a
-
SHA512
b45f0da52ca08a38fe34433bc7f79f8dc14741b78cb98f2561e916e9bcb328f3684feb98910737efb3bbf52ce853c3f6787cbc17555d08e7659a31d21e35baf0
-
SSDEEP
196608:jPRWsknOJebY/DoV7R2gfRWhX8WPeRE91PBixLT:jJWFSSFi8weRa5mLT
Score
10/10
Malware Config
Signatures
-
Detect ZGRat V1 1 IoCs
-
Zgrat family
-
.NET Reactor proctector 2 IoCs
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
986b605ca83fdacdc1b5ef42e40ad028b54d6a4e05b523b8b3bf1bcc87a0163a
-
不坑盒子/不坑盒子 2023.1001.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
不坑盒子/可视智能写作 教程.docx
-
不坑盒子/请在电脑上下载.txt