Overview

overview

10

Static

static

10

75095cbcb5...38.exe

windows7-x64

10

75095cbcb5...38.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    75095cbcb500e62342be13314cb75838

  • Size

    1.9MB

  • Sample

    231222-g18n4aceg6

  • MD5

    75095cbcb500e62342be13314cb75838

  • SHA1

    930b94479fb88c07fa4ff3fc400c77766642e8b6

  • SHA256

    f298c1898a83e935d067a66c9ee1973aed989fc07d9761cce5045710012959ff

  • SHA512

    7f4ee77604aaaa63fe40ce6dd97141860b300899658b5736189bb4c8d037be51557277130d4dcaf597eebb03aaed1857b3f22455a67329dd24d61165307c4639

  • SSDEEP

    24576:bedatdC5JFfQnkwNei1zAGY84ausHbEgGtI59b+H7EnTVzBQfx/DKeGNIKP8yKP8:bedatdCNu9HNjTlBQfxpGN

Score
10/10
zgratpersistencerat

Malware Config

Targets

    • Target

      75095cbcb500e62342be13314cb75838

    • Size

      1.9MB

    • MD5

      75095cbcb500e62342be13314cb75838

    • SHA1

      930b94479fb88c07fa4ff3fc400c77766642e8b6

    • SHA256

      f298c1898a83e935d067a66c9ee1973aed989fc07d9761cce5045710012959ff

    • SHA512

      7f4ee77604aaaa63fe40ce6dd97141860b300899658b5736189bb4c8d037be51557277130d4dcaf597eebb03aaed1857b3f22455a67329dd24d61165307c4639

    • SSDEEP

      24576:bedatdC5JFfQnkwNei1zAGY84ausHbEgGtI59b+H7EnTVzBQfx/DKeGNIKP8yKP8:bedatdCNu9HNjTlBQfxpGN

    Score
    10/10
    zgratpersistencerat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks