General

  • Target

    A7DCEF177AF8AC4D8FF3A4A2FFA635CE.exe

  • Size

    4.1MB

  • MD5

    a7dcef177af8ac4d8ff3a4a2ffa635ce

  • SHA1

    567f11c22c9651cb1db4ff29c1535a1893bc7c27

  • SHA256

    d2c7f4155786a209bdf84fb13f664fb283eaaeb7607d23ff4e5edae510f1ecd8

  • SHA512

    3b05e4dd426933c24ad15bfbaefc41a55b24c979264e59e75544710359998343c0dd2f2b9fb9c31036cbddf52fbe4a2e0794d0fa751d2983ab50cebc76739145

  • SSDEEP

    98304:V8S5kV//FB8ZfgVUs+wuScrrajjjBghqO80:V8SqV//FBmTEc+HFL0

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Zgrat family
  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • A7DCEF177AF8AC4D8FF3A4A2FFA635CE.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections