General
-
Target
etaxes-az.exe
-
Size
260KB
-
MD5
57d459a5e564d4363585674b69431ba3
-
SHA1
1f86df0fd06acd585f6508b40fc3726bbda212f3
-
SHA256
14e67611e38586eec77089ae62c876ba6ecf01a88510a6c63c6a657ba89cfb24
-
SHA512
7ed335ddffa46cd2c706646b2530eb1039de6209d03f520956892209c29c3a6e7383252f0923c74b2f5b5f6a26cbec1db9676b2e19909cda514a065403d88233
-
SSDEEP
3072:qm2Pa/rV/nvqcriS4jg1ktss3+PQMUPjppK9UduTVSdTxlR+DtC8:qPcr7Zoss3zP1xQVOeh
Score
10/10
Malware Config
Signatures
-
Detect ZGRat V1 1 IoCs
-
Zgrat family
-
.NET Reactor proctector 1 IoCs
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
etaxes-az.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections