General

  • Target

    BFruits.rar

  • Size

    23.3MB

  • MD5

    8b908334245101ce255ec6e7d1e13445

  • SHA1

    c8ba4a9049a679c2e35aed337de865a80b4bb26f

  • SHA256

    ec42abaa7b127dcaf0c1cf2ffcb830a79034d43889e9f4db8dee8566b62def82

  • SHA512

    fc6e74db23f866b10c9ab5be3b71d2604c3120a546e6f6cf06b662c052458bfb5f2dae75f708d8646e6a658d20d7710d518bb7391ac2b17395455b3fb0960248

  • SSDEEP

    393216:fkmOaKSOzKbSXjC2g1q71TwM8iIe1n/vtSm5lJfMnuUj4h8qBcRuQSXYyn8HzM8E:fbOYGlgxiRgm5lShC8qOyIyn8Hzpy90S

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Zgrat family
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • BFruits.rar
    .rar

    Password: 2023

  • Blox FruitsF/1sh4rtf4oj.txt
    .js
  • Blox FruitsF/1u3sks9jmh.txt
    .js
  • Blox FruitsF/1wjqvc6xjq.txt
    .js
  • Blox FruitsF/BFruits Script.exe
    .exe windows:4 windows x86 arch:x86

    Password: 2023

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Blox FruitsF/Client.config
    .exe windows:6 windows x86 arch:x86

    Password: 2023

    59bafed0fa1382619aa4b845f3f73552


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Blox FruitsF/Method 2.rar
    .rar

    Password: 2023

  • Method 2/loader.exe
    .exe windows:4 windows x86 arch:x86

    Password: 2023

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Blox FruitsF/cacert.pem
  • Blox FruitsF/config.vdf
  • Blox FruitsF/gshop2.data
  • Blox FruitsF/gshop3.data
  • Blox FruitsF/qtwebengine_resources.pak
  • Blox FruitsF/qtwebengine_resources_100p.pak