General
-
Target
Fytuki.exe
-
Size
1.4MB
-
MD5
680ee993bc1cb27bb4051664ecc9745e
-
SHA1
4bdca312620268a71c96dc28d8b6694fd69fcfd1
-
SHA256
dd7f22cb003e0789a2f79073a83d1c41709f1428efea44a5c897355ac5b93c83
-
SHA512
cacaac16b8902e5392a9c1a7ef6b2fc660c191ce020e4f1370ec95b87c49a2e5446d1def870f118c50a176ff28d3ce1feb27d139af520e53af89c490a3594f55
-
SSDEEP
24576:/fZN65L/tZdVOGRi//d//C0bVbh0dngwtlaHxN8KUWVe6tw2wvKhLnjm:5N6t/tZdVOoi/hqWCdngwwHv5VbtHwQm
Score
10/10
Malware Config
Signatures
-
Detect ZGRat V1 1 IoCs
-
Zgrat family
-
.NET Reactor proctector 1 IoCs
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
Fytuki.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections