General

  • Target

    bcb5733f439dc06fdd2b19899212a105c9a9785b6645fa65dd8700c75cb8c30f

  • Size

    2.1MB

  • MD5

    87f87a89ece5a93ddd48bd43039abade

  • SHA1

    11653f6ec7ab33e54c5497a4b0eb2b0fa4b1ecaa

  • SHA256

    bcb5733f439dc06fdd2b19899212a105c9a9785b6645fa65dd8700c75cb8c30f

  • SHA512

    960898e3156254c26c2620eacf7af45a23f9e83d361a7eaf4f1dc15554b778b02a5eca8bdeed71b181aac3174d5672a58a5d74441bebe850a12cb58deec1aca7

  • SSDEEP

    49152:35WOF60zuxIsfqHhYLfsRCNtB7k67kohA7kX1m5X:3bF6YuxIsfqHOsRCbB7k67kd7k0

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Zgrat family
  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bcb5733f439dc06fdd2b19899212a105c9a9785b6645fa65dd8700c75cb8c30f
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections