Overview

overview

10

Static

static

3

d497d6f5d3...81.exe

windows7-x64

10

d497d6f5d3...81.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d497d6f5d3b74379d1ca2e1abde20281

  • Size

    931KB

  • Sample

    231111-k7sg8sdg65

  • MD5

    d497d6f5d3b74379d1ca2e1abde20281

  • SHA1

    937aac5cf9191e833724edda2742ed115a5237c7

  • SHA256

    a1765648a41eea21fd942776cba9b50705673d8f7564ae7f8c9751eda9e2e564

  • SHA512

    bdb28622542e3b34e40b37a189a967b6136963200fec616c6147fd36bb543b94a7d64128d5fbd65a5358b1131dc265c7cbdb1240fece3e8c09652b97c4c025a6

  • SSDEEP

    24576:rUH6r+HyTd9H1hiy/Ku8UNM1Gr6ycgR6EL13bz:rLVhiy/Ku1N6GW9i33

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      d497d6f5d3b74379d1ca2e1abde20281

    • Size

      931KB

    • MD5

      d497d6f5d3b74379d1ca2e1abde20281

    • SHA1

      937aac5cf9191e833724edda2742ed115a5237c7

    • SHA256

      a1765648a41eea21fd942776cba9b50705673d8f7564ae7f8c9751eda9e2e564

    • SHA512

      bdb28622542e3b34e40b37a189a967b6136963200fec616c6147fd36bb543b94a7d64128d5fbd65a5358b1131dc265c7cbdb1240fece3e8c09652b97c4c025a6

    • SSDEEP

      24576:rUH6r+HyTd9H1hiy/Ku8UNM1Gr6ycgR6EL13bz:rLVhiy/Ku1N6GW9i33

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks