General
-
Target
Client.exe
-
Size
450KB
-
MD5
47b5b34d4bc83440762092d7d3edce03
-
SHA1
955326700193970a156a7e7bed4b04058f1c7dc2
-
SHA256
227f86c664d095d338d65694aca8798e69c3650e465c5c1fa92d16dc591290be
-
SHA512
f2ade94d335a19e3eb9df588027c73bbc68a8cb03d758881c4dc230134a71fe605493a2d438b7ff00864ce9e946abcc7b7f0abfad1327e836fea27ddd3484b0f
-
SSDEEP
6144:8f9lLZhpKvvFAv1MsAPjvCl5w37MHDUFyEWcO/eWXWXWNQD+EKd+JGQkNC1sh:8f9fzKvavm1DmwFyjhWiCF
Score
10/10
Malware Config
Signatures
-
Detect ZGRat V1 1 IoCs
-
Zgrat family
-
.NET Reactor proctector 1 IoCs
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
Client.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections