General

  • Target

    fud.exe

  • Size

    404KB

  • MD5

    9efee972cbcf6fc16ef8e453e63d7f96

  • SHA1

    56a828e072c040b39406e9d3bd1c155a8bf109d2

  • SHA256

    f826d9c86e57ca4ecdeff241182ae4e2c3f5c2a6e17159276c51ac9acace96b4

  • SHA512

    38f995134d44fc7d0bc4d7744a2325e26b376987d4b2f499aca7ed5afcb299867553129f8e998d117f973b386e317cb705e7d592b20c2a703d03145727628607

  • SSDEEP

    6144:1PFZ8T2XhCp+D20/QaoO0BpdDCM6j40EoXnPeq2X:lFZZMgDb/Q/XDP8efX

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Zgrat family
  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fud.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections