Overview

overview

10

Static

static

10

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9c9fa75f3036f9897d021af53d30629f1205b4e2440c8ea355aef011e4c8720b

  • Size

    1.7MB

  • Sample

    231126-2en3sacg5x

  • MD5

    b9c42b550dc3c3575e901c134dbea64a

  • SHA1

    db01d975031a5f3b43ca61fdec0d0557f67b0d6e

  • SHA256

    9c9fa75f3036f9897d021af53d30629f1205b4e2440c8ea355aef011e4c8720b

  • SHA512

    97d6785641081662d54c8aa30a76a7812cf3065357607485bdba4aac3cc4b114476e5b33b78610e13f628032917a8acdac75c80411105f9c26f65340291e5a30

  • SSDEEP

    24576:rQa+rRep38knZGbO4oFya8ZbRxaiXvnEc3Suvb7sNPwEFfTPCRi4Vz:rZ+rRe3zn4ioa8ZbRMiXO07sNPwERWV

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      9c9fa75f3036f9897d021af53d30629f1205b4e2440c8ea355aef011e4c8720b

    • Size

      1.7MB

    • MD5

      b9c42b550dc3c3575e901c134dbea64a

    • SHA1

      db01d975031a5f3b43ca61fdec0d0557f67b0d6e

    • SHA256

      9c9fa75f3036f9897d021af53d30629f1205b4e2440c8ea355aef011e4c8720b

    • SHA512

      97d6785641081662d54c8aa30a76a7812cf3065357607485bdba4aac3cc4b114476e5b33b78610e13f628032917a8acdac75c80411105f9c26f65340291e5a30

    • SSDEEP

      24576:rQa+rRep38knZGbO4oFya8ZbRxaiXvnEc3Suvb7sNPwEFfTPCRi4Vz:rZ+rRe3zn4ioa8ZbRMiXO07sNPwERWV

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks