Overview

overview

10

Static

static

10

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f4f77e85cad2e8810d1c4f77d331a40dbca4fee7b5b5e30595025c58ad7844ad

  • Size

    1.7MB

  • Sample

    231113-lb35jacb92

  • MD5

    8a0c0d8277cb76f54616540f7612ddc1

  • SHA1

    b199e5e7656f2041186baa9df2c08ea05baf663a

  • SHA256

    f4f77e85cad2e8810d1c4f77d331a40dbca4fee7b5b5e30595025c58ad7844ad

  • SHA512

    54efa0623f4f9679b179dbcc84af5befab5d51baa3030c79b5ec4cb4a4aaa271798e9a322fc6e753579236880208624417f4d0faff8fc56ddbaa3fee9dd07605

  • SSDEEP

    24576:rQa+rRep38knZGbO4oFya8ZbRxaiXvnEc3Suvb7sNPwEFfTPCRi4Vz:rZ+rRe3zn4ioa8ZbRMiXO07sNPwERWV

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      f4f77e85cad2e8810d1c4f77d331a40dbca4fee7b5b5e30595025c58ad7844ad

    • Size

      1.7MB

    • MD5

      8a0c0d8277cb76f54616540f7612ddc1

    • SHA1

      b199e5e7656f2041186baa9df2c08ea05baf663a

    • SHA256

      f4f77e85cad2e8810d1c4f77d331a40dbca4fee7b5b5e30595025c58ad7844ad

    • SHA512

      54efa0623f4f9679b179dbcc84af5befab5d51baa3030c79b5ec4cb4a4aaa271798e9a322fc6e753579236880208624417f4d0faff8fc56ddbaa3fee9dd07605

    • SSDEEP

      24576:rQa+rRep38knZGbO4oFya8ZbRxaiXvnEc3Suvb7sNPwEFfTPCRi4Vz:rZ+rRe3zn4ioa8ZbRMiXO07sNPwERWV

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks