General
-
Target
E580BEC698CCDF29C4882E5B30356091.exe
-
Size
3.7MB
-
MD5
e580bec698ccdf29c4882e5b30356091
-
SHA1
9bc7dc0477847c55dd9fd11eddaf05961855df63
-
SHA256
207061957ecdb839c7dc8cf1d39b8657efd078246edf2f29d930c7ea65a565d7
-
SHA512
1bbea999bd697d9f179b805377c2e19673d774a0d076481c773c6c4f1df5cec313873e55768db6bfc9f999433fa1f0495b9a23bb07ab4306656901b5bd040e3f
-
SSDEEP
12288:mqd6kNbz7jSCt8ww+B4fGD9HINHYRbydjYgIOtgqWSQD36zmyXPbq20kTmo4U5L0:rd60TGCBACmjYgIq1QD8/q2Oo4afysW
Score
10/10
Malware Config
Signatures
-
Detect ZGRat V1 1 IoCs
-
Zgrat family
-
.NET Reactor proctector 1 IoCs
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
E580BEC698CCDF29C4882E5B30356091.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections