Overview

overview

10

Static

static

3

d13bebabc4...9d.exe

windows7-x64

10

d13bebabc4...9d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d4ba5e2982463378357486b8d7f656c1.bin

  • Size

    24KB

  • Sample

    231220-d89dtadgc4

  • MD5

    30227dea3c6b3deb896fdc27bac01b9b

  • SHA1

    4fc952eac0537306ea508530569d8a4eb01be78f

  • SHA256

    f935004264672457491f62ec2dfee30c9c1f20690c2e1e87f339798d4b34ac61

  • SHA512

    2e78b7c4cf4a108a31c7f83136969d3efff3bf50c443e98c63f1c2681946bb78f5f5c9c3a9baaacbe83a0ab1e5d8f169e8e87277ed62c271874000d251548e90

  • SSDEEP

    384:ycxOnwAZdTTgJCBAkcURGyXgQotPNfF2CIxdcO/EfecgTrUdF+:yg8crJkGyQZN92CIxdcuEWdvUK

Score
10/10
zgratpersistencerat

Malware Config

Targets

    • Target

      d13bebabc4063d86102cef3bdaed105d826ee3f604986eebefa2e8be3620f29d.exe

    • Size

      47KB

    • MD5

      d4ba5e2982463378357486b8d7f656c1

    • SHA1

      dd0502d38ad2bb63e57bb71956bb02b38f825c86

    • SHA256

      d13bebabc4063d86102cef3bdaed105d826ee3f604986eebefa2e8be3620f29d

    • SHA512

      cc617ebea4b67e85fc02c56d9099649d88f88d8463e62dc3d78b139baa0c32e3b7b346c584ee4c1dfd3d8d97121e6c39ea4d91bee91fda5d05eb437930a06e37

    • SSDEEP

      768:F20/1cyCPJmQcsmC2+vdiS8hYo8gk4nFYiBIuSWC93hxb/xeFe746FCi:F2s1bwJt2Lj8gfii3hC93hX4E4K

    Score
    10/10
    zgratpersistencerat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks