Overview

overview

10

Static

static

10

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    95d9af6bbcf51231f765b04ed8b8e765388e28e8e3aac0c06c3d1c75bc210d93

  • Size

    1.7MB

  • Sample

    231122-fjakasac74

  • MD5

    85503a298f3d3680349b8f956f335ba6

  • SHA1

    25557850af352dd22f7f4a8e2392bd30d700e624

  • SHA256

    95d9af6bbcf51231f765b04ed8b8e765388e28e8e3aac0c06c3d1c75bc210d93

  • SHA512

    1f5d743a0726ffa740c54a7ac539df3fcc4a6641bda9dda798683eb017bbc4262b87101716b333ccb79e151ee7c8baf05fac8267a61c284aebd68abce48d9bc3

  • SSDEEP

    24576:rQa+rRep38knZGbO4oFya8ZbRxaiXvnEc3Suvb7sNPwEFfTPCRi4Vz:rZ+rRe3zn4ioa8ZbRMiXO07sNPwERWV

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      95d9af6bbcf51231f765b04ed8b8e765388e28e8e3aac0c06c3d1c75bc210d93

    • Size

      1.7MB

    • MD5

      85503a298f3d3680349b8f956f335ba6

    • SHA1

      25557850af352dd22f7f4a8e2392bd30d700e624

    • SHA256

      95d9af6bbcf51231f765b04ed8b8e765388e28e8e3aac0c06c3d1c75bc210d93

    • SHA512

      1f5d743a0726ffa740c54a7ac539df3fcc4a6641bda9dda798683eb017bbc4262b87101716b333ccb79e151ee7c8baf05fac8267a61c284aebd68abce48d9bc3

    • SSDEEP

      24576:rQa+rRep38knZGbO4oFya8ZbRxaiXvnEc3Suvb7sNPwEFfTPCRi4Vz:rZ+rRe3zn4ioa8ZbRMiXO07sNPwERWV

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks