Overview

overview

10

Static

static

10

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    30e2e3c9d48bcf3fb5b5fb0b6ea7edf076ff68e4f11ffb55753a71b3c863face

  • Size

    1.7MB

  • Sample

    231126-186n9acf5v

  • MD5

    70c2aed9dbc97b5246846aed8e6cbe92

  • SHA1

    4a4958cabd319d4015094b1fd7c01ee5e92584b2

  • SHA256

    30e2e3c9d48bcf3fb5b5fb0b6ea7edf076ff68e4f11ffb55753a71b3c863face

  • SHA512

    6d2cd2b422dabf1a668753664e9679cb8f0172b859d41a80a832047c41594e8cf4b08ba438815a83f9d4555d7c66c7baf7430bd142fb792d9c32606422b91aa5

  • SSDEEP

    24576:rQa+rRep38knZGbO4oFya8ZbRxaiXvnEc3Suvb7sNPwEFfTPCRi4Vz:rZ+rRe3zn4ioa8ZbRMiXO07sNPwERWV

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      30e2e3c9d48bcf3fb5b5fb0b6ea7edf076ff68e4f11ffb55753a71b3c863face

    • Size

      1.7MB

    • MD5

      70c2aed9dbc97b5246846aed8e6cbe92

    • SHA1

      4a4958cabd319d4015094b1fd7c01ee5e92584b2

    • SHA256

      30e2e3c9d48bcf3fb5b5fb0b6ea7edf076ff68e4f11ffb55753a71b3c863face

    • SHA512

      6d2cd2b422dabf1a668753664e9679cb8f0172b859d41a80a832047c41594e8cf4b08ba438815a83f9d4555d7c66c7baf7430bd142fb792d9c32606422b91aa5

    • SSDEEP

      24576:rQa+rRep38knZGbO4oFya8ZbRxaiXvnEc3Suvb7sNPwEFfTPCRi4Vz:rZ+rRe3zn4ioa8ZbRMiXO07sNPwERWV

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks