Overview

overview

10

Static

static

10

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    893facdeda8a6b489f34d583927a5924a7fef17b979b25b35db82e9061cd2e1a

  • Size

    1.7MB

  • Sample

    231224-2jnyksedel

  • MD5

    6721a03e5521c0dd8adc3cf0970debc6

  • SHA1

    eeaa1b175abd7927114ac98a32ba64f4e6e85ee3

  • SHA256

    893facdeda8a6b489f34d583927a5924a7fef17b979b25b35db82e9061cd2e1a

  • SHA512

    f1b3f286e7cdb6a3e1c6cf179feeb5bc4c58424d6b7b292367bec80fbb7050518a4bec70d09a2e1aa7d375c47b4aed1579b554abdb4827fc8bfbc962afe0a901

  • SSDEEP

    24576:rQa+rRep38knZGbO4oFya8ZbRxaiXvnEc3Suvb7sNPwEFfTPCRi4Vz:rZ+rRe3zn4ioa8ZbRMiXO07sNPwERWV

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      893facdeda8a6b489f34d583927a5924a7fef17b979b25b35db82e9061cd2e1a

    • Size

      1.7MB

    • MD5

      6721a03e5521c0dd8adc3cf0970debc6

    • SHA1

      eeaa1b175abd7927114ac98a32ba64f4e6e85ee3

    • SHA256

      893facdeda8a6b489f34d583927a5924a7fef17b979b25b35db82e9061cd2e1a

    • SHA512

      f1b3f286e7cdb6a3e1c6cf179feeb5bc4c58424d6b7b292367bec80fbb7050518a4bec70d09a2e1aa7d375c47b4aed1579b554abdb4827fc8bfbc962afe0a901

    • SSDEEP

      24576:rQa+rRep38knZGbO4oFya8ZbRxaiXvnEc3Suvb7sNPwEFfTPCRi4Vz:rZ+rRe3zn4ioa8ZbRMiXO07sNPwERWV

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks