Overview

overview

10

Static

static

10

a19ca4c84d...52.exe

windows7-x64

10

a19ca4c84d...52.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a19ca4c84df9e57d2c8f5543c4db9d52.exe

  • Size

    322KB

  • Sample

    231122-gpransbd3v

  • MD5

    a19ca4c84df9e57d2c8f5543c4db9d52

  • SHA1

    e3566ba1659d1a7f554dd85de286ac0bdf71ae4a

  • SHA256

    86f8e546815bd0b77b0fcc906b700caa5baed1568197378a20fa6b581a2ab709

  • SHA512

    4b13791602ef97be25f2c0ab7c40478f2d792a0b189f10cc1da71a0d54a4a2ad0c8bb543d2b5b96015a83a37858bfa4207b636c82db8d2bc18ec44a70d1904f9

  • SSDEEP

    6144:21pgEgRUcmvB2ePvoAVvHoKjBZZd036CS3Q:2EWxgAVvLBfds6CR

Score
10/10
zgratpersistencerat

Malware Config

Targets

    • Target

      a19ca4c84df9e57d2c8f5543c4db9d52.exe

    • Size

      322KB

    • MD5

      a19ca4c84df9e57d2c8f5543c4db9d52

    • SHA1

      e3566ba1659d1a7f554dd85de286ac0bdf71ae4a

    • SHA256

      86f8e546815bd0b77b0fcc906b700caa5baed1568197378a20fa6b581a2ab709

    • SHA512

      4b13791602ef97be25f2c0ab7c40478f2d792a0b189f10cc1da71a0d54a4a2ad0c8bb543d2b5b96015a83a37858bfa4207b636c82db8d2bc18ec44a70d1904f9

    • SSDEEP

      6144:21pgEgRUcmvB2ePvoAVvHoKjBZZd036CS3Q:2EWxgAVvLBfds6CR

    Score
    10/10
    zgratpersistencerat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks