Overview

overview

10

Static

static

10

88CC26F5D6...4F.exe

windows7-x64

10

88CC26F5D6...4F.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    88CC26F5D63AF5FCFDC36ACCAE0DB04F.exe

  • Size

    20.4MB

  • Sample

    231124-qv8xcabe77

  • MD5

    88cc26f5d63af5fcfdc36accae0db04f

  • SHA1

    46d7627f0a00cd378684555e30d7bfbe78687143

  • SHA256

    ee2f4598d9f48283bdd46bb0c9bd70f250a257e89bcfc2fc03275b913230d358

  • SHA512

    3cd33e09524223a1baf882671eacb8033b354a03993c2d2ed7a4ba04796f9b518b5d5b92c93210492f0228bbbb057538bbf23507d10fd8112dce38b359f92cb5

  • SSDEEP

    393216:WDfxovk0AJIh+vncZ9YvMQRVbjUU+5+NBoTRdDzWjWl2xEIYYOoq:WVovkNJIh+vXMwVb3+5+Xo1dva9FYYFq

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      88CC26F5D63AF5FCFDC36ACCAE0DB04F.exe

    • Size

      20.4MB

    • MD5

      88cc26f5d63af5fcfdc36accae0db04f

    • SHA1

      46d7627f0a00cd378684555e30d7bfbe78687143

    • SHA256

      ee2f4598d9f48283bdd46bb0c9bd70f250a257e89bcfc2fc03275b913230d358

    • SHA512

      3cd33e09524223a1baf882671eacb8033b354a03993c2d2ed7a4ba04796f9b518b5d5b92c93210492f0228bbbb057538bbf23507d10fd8112dce38b359f92cb5

    • SSDEEP

      393216:WDfxovk0AJIh+vncZ9YvMQRVbjUU+5+NBoTRdDzWjWl2xEIYYOoq:WVovkNJIh+vXMwVb3+5+Xo1dva9FYYFq

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks