Detect ZGRat V1

Detected google phishing page

Glupteba

Glupteba is a modular loader written in Golang with various components.

Glupteba payload

PrivateLoader

PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

RedLine

RedLine Stealer is a malware family written in C#, first appearing in early 2020.

RedLine payload

RisePro

RisePro stealer is an infostealer distributed by PrivateLoader.

SmokeLoader

Modular backdoor trojan in use since 2014.

ZGRat

ZGRat is remote access trojan written in C#.

Downloads MZ/PE file

Modifies Windows Firewall

Stops running service(s)