Overview

overview

10

Static

static

10

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bdce4c9fa0f6bf4886615a0ce0b2473dc33cc2058d257fe9aa3eadcd425d0bbd

  • Size

    1.7MB

  • Sample

    231122-fkkfwsac95

  • MD5

    4843f62f3e35dcc7432a3c05b7b4b7a4

  • SHA1

    91ce8f9ef83e4cda548a5f9c636eebab21772866

  • SHA256

    bdce4c9fa0f6bf4886615a0ce0b2473dc33cc2058d257fe9aa3eadcd425d0bbd

  • SHA512

    5eaafaa328730b6212108edd3287bee81cef5b67360b10272e08dc7b1b7814b47fc0ff57a2ce3d9a3bbc088dc2bb8bfe841d380baefe69c2572a9073ec650e02

  • SSDEEP

    24576:rQa+rRep38knZGbO4oFya8ZbRxaiXvnEc3Suvb7sNPwEFfTPCRi4Vz:rZ+rRe3zn4ioa8ZbRMiXO07sNPwERWV

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      bdce4c9fa0f6bf4886615a0ce0b2473dc33cc2058d257fe9aa3eadcd425d0bbd

    • Size

      1.7MB

    • MD5

      4843f62f3e35dcc7432a3c05b7b4b7a4

    • SHA1

      91ce8f9ef83e4cda548a5f9c636eebab21772866

    • SHA256

      bdce4c9fa0f6bf4886615a0ce0b2473dc33cc2058d257fe9aa3eadcd425d0bbd

    • SHA512

      5eaafaa328730b6212108edd3287bee81cef5b67360b10272e08dc7b1b7814b47fc0ff57a2ce3d9a3bbc088dc2bb8bfe841d380baefe69c2572a9073ec650e02

    • SSDEEP

      24576:rQa+rRep38knZGbO4oFya8ZbRxaiXvnEc3Suvb7sNPwEFfTPCRi4Vz:rZ+rRe3zn4ioa8ZbRMiXO07sNPwERWV

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks