Overview

overview

10

Static

static

10

588506d91e...2d.exe

windows7-x64

10

588506d91e...2d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    588506d91ec77a608a62417ea1d67204b1b173bd90af7e17cf52bbd0f03f7d2d.exe

  • Size

    1.5MB

  • Sample

    231203-mp2pasbd79

  • MD5

    6367fb0d52b90b807550b3eedbb277f0

  • SHA1

    426f118550fa5006fbcab8c6d78b105600bf82c3

  • SHA256

    588506d91ec77a608a62417ea1d67204b1b173bd90af7e17cf52bbd0f03f7d2d

  • SHA512

    185171a50f2ce8d0742dc2e1fee5b2b91fd6884f899726495823124eed8b83094a9d570b04f7a9fbcaac56eca7e48a1c1679a3f284ea0ac3707340df1584b671

  • SSDEEP

    24576:Aj3JaPnj1wF03rp/EKWVgdG2rhQpG458wNNqZ:Aj3JE1wclEKMgdGpGydNy

Score
10/10
purelogszgratratstealer

Malware Config

Targets

    • Target

      588506d91ec77a608a62417ea1d67204b1b173bd90af7e17cf52bbd0f03f7d2d.exe

    • Size

      1.5MB

    • MD5

      6367fb0d52b90b807550b3eedbb277f0

    • SHA1

      426f118550fa5006fbcab8c6d78b105600bf82c3

    • SHA256

      588506d91ec77a608a62417ea1d67204b1b173bd90af7e17cf52bbd0f03f7d2d

    • SHA512

      185171a50f2ce8d0742dc2e1fee5b2b91fd6884f899726495823124eed8b83094a9d570b04f7a9fbcaac56eca7e48a1c1679a3f284ea0ac3707340df1584b671

    • SSDEEP

      24576:Aj3JaPnj1wF03rp/EKWVgdG2rhQpG458wNNqZ:Aj3JE1wclEKMgdGpGydNy

    Score
    10/10
    purelogszgratratstealer

    • Detect PureLogs payload

    • Detect ZGRat V1

    • PureLogs

      PureLogs is an infostealer written in C#.

      stealerpurelogs

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks