General

  • Target

    474a984b6bcff5178b241e05c8d2e35a92987f7e83394682241dfa5f66105a5c

  • Size

    2.1MB

  • MD5

    366f211d4275c4a6ef43431825f39f39

  • SHA1

    708af04245b3becd8ce0612f7461dc4c7d0afba3

  • SHA256

    474a984b6bcff5178b241e05c8d2e35a92987f7e83394682241dfa5f66105a5c

  • SHA512

    6aabc671ba8ebdb42ac3082bdc1bed461cff6c8ee6a3100a683ad24ae518770bdc4e02e8c467c66244ad946e74b49b521fe076cdeddc775295611520ac37e372

  • SSDEEP

    49152:RWp8shNBIuvsRCyq7k6K7koKA7kmRm5X:4p8Q/ZsRCb7kv7kq7kz

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Zgrat family
  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 474a984b6bcff5178b241e05c8d2e35a92987f7e83394682241dfa5f66105a5c
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections