Overview

overview

10

Static

static

3

140510ca01...a9.exe

windows7-x64

10

140510ca01...a9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    140510ca012bf95c60b339b6388c2ca9.bin

  • Size

    812KB

  • Sample

    231106-bmhmvsgh63

  • MD5

    140510ca012bf95c60b339b6388c2ca9

  • SHA1

    97f4ef1024bd3c194572e8d3189f8fbf9d5cb127

  • SHA256

    f00b2b25861c0218820c23eca788881bc73c8470f59872989acf60c04cd83630

  • SHA512

    ee30c446d26f740d9b557f99cff04b3d471793b840b56ef769eee3011d6d2fda728a4864973ba4310e4a0d5793976b9f896c73b2d2317cdc7eec23810f4a0cf0

  • SSDEEP

    12288:X8+/Pqc6JGU0QC6MFqRG1DOkzfAWSiXBZP6haDD5F33XUTmzFJNDVSAQ:s+/PqcFU7vMgqEOrP6haDlFHET0DMA

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      140510ca012bf95c60b339b6388c2ca9.bin

    • Size

      812KB

    • MD5

      140510ca012bf95c60b339b6388c2ca9

    • SHA1

      97f4ef1024bd3c194572e8d3189f8fbf9d5cb127

    • SHA256

      f00b2b25861c0218820c23eca788881bc73c8470f59872989acf60c04cd83630

    • SHA512

      ee30c446d26f740d9b557f99cff04b3d471793b840b56ef769eee3011d6d2fda728a4864973ba4310e4a0d5793976b9f896c73b2d2317cdc7eec23810f4a0cf0

    • SSDEEP

      12288:X8+/Pqc6JGU0QC6MFqRG1DOkzfAWSiXBZP6haDD5F33XUTmzFJNDVSAQ:s+/PqcFU7vMgqEOrP6haDlFHET0DMA

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks