General

  • Target

    Setup_Pswrd_123.rar

  • Size

    11.8MB

  • MD5

    bac104ad76a0971ab39d5e9f276c5800

  • SHA1

    c805e05c3852a84cc9a50438cea3a849e4264c5a

  • SHA256

    449d40b062ee715274566d55ef96ea6ce558ce34402835ea57f7bd00be4cc00e

  • SHA512

    dc71d1990286700e9935185d7d1d9b360d3a549d12ad631fdd77813e90faee0c9c17a45b78e231a1a715b2e5dc774d01afc57102ba5620612ea545da97962381

  • SSDEEP

    196608:q+mFL3gJIinY+OuJB/BWuijMp3ppdYg7aBpsb3Z/QSiL7O541KdDrtVRF6nRFsPO:4UJbY+OI/Auiop3ppdBIpE3q3Ls4i13S

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Zgrat family
  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • Setup_Pswrd_123.rar
    .rar

    Password: 123

  • Setup_Pswrd_123.rar
    .rar

    Password: 123

  • License.txt
  • Setup.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • i18n/drawpile_cs.qm
  • i18n/drawpile_de.qm
  • i18n/drawpile_fi.qm
  • i18n/drawpile_fr.qm
  • i18n/drawpile_it.qm
  • i18n/drawpile_ja.qm
  • i18n/drawpile_pt.qm
  • i18n/drawpile_ru.qm
  • i18n/drawpile_uk.qm
  • i18n/drawpile_vi.qm
  • i18n/drawpile_zh.qm
  • i18n/qt_cs.qm
  • i18n/qt_de.qm
  • i18n/qt_fi.qm
  • i18n/qt_fr.qm
  • i18n/qt_it.qm
  • i18n/qt_ja.qm
  • i18n/qt_pt.qm
  • i18n/qt_ru.qm
  • i18n/qt_uk.qm
  • ico/splash/splash_001.png
    .png

    Password: 123

  • ico/splash/splash_002.png
    .png

    Password: 123

  • ico/splash/splash_003.png
    .png

    Password: 123

  • ico/splash/splash_004.png
    .png

    Password: 123

  • ico/splash/splash_005.png
    .png

    Password: 123

  • ico/splash/splash_006.png
    .png

    Password: 123

  • ico/splash/splash_007.png
    .png
  • ico/splash/splash_008.png
    .png
  • ico/splash/splash_009.png
    .png
  • ico/splash/splash_010.png
    .png
  • ico/splash/splash_011.png
    .png
  • ico/splash/splash_012.png
    .png
  • ico/splash/splash_013.png
    .png
  • ico/splash/splash_014.png
    .png
  • ico/splash/splash_015.png
    .png
  • ico/splash/splash_016.png
    .png
  • ico/splash/splash_017.png
    .png
  • ico/splash/splash_018.png
    .png
  • ico/splash/splash_019.png
    .png
  • ico/splash/splash_020.png
    .png
  • ico/splash/splash_021.png
    .png
  • ico/splash/splash_022.png
    .png .ps1 polyglot
  • ico/splash/splash_023.png
    .png
  • ico/splash/splash_024.png
    .png
  • ico/splash/splash_025.png
    .png
  • ico/splash/splash_026.png
    .png
  • ico/splash/splash_027.png
    .png
  • ico/splash/splash_028.png
    .png
  • ico/splash/splash_029.png
    .png
  • ico/splash/splash_030.png
    .png
  • ico/splash/splash_031.png
    .png
  • ico/splash/splash_032.png
    .png
  • ico/splash/splash_033.png
    .png
  • ico/splash/splash_034.png
    .png
  • ico/splash/splash_035.png
    .png
  • ico/splash/splash_036.png
    .png
  • ico/splash/splash_037.png
    .png
  • ico/splash/splash_038.png
    .png
  • ico/splash/splash_039.png
    .png
  • ico/splash/splash_040.png
    .png
  • ico/splash/splash_041.png
    .png
  • ico/splash/splash_042.png
    .png
  • ico/splash/splash_043.png
    .png
  • ico/splash/splash_044.png
    .png
  • ico/splash/splash_045.png
    .png
  • ico/splash/splash_046.png
    .png
  • ico/splash/splash_047.png
    .png
  • ico/splash/splash_048.png
    .png
  • ico/splash/splash_049.png
    .png
  • iconengines/qsvgicon.dll
    .dll windows:4 windows x86 arch:x86

    b4cc1d6a3666564c35b22411edaa7f10


    Headers

    Imports

    Exports

    Sections

  • imageformats/qgif.dll
    .dll windows:4 windows x86 arch:x86

    e1d815bdb88ab0cb89372eee6d2d4972


    Headers

    Imports

    Exports

    Sections

  • imageformats/qjpeg.dll
    .dll windows:4 windows x86 arch:x86

    72219008184ac3c49f1cb308a02f1b03


    Headers

    Imports

    Exports

    Sections

  • imageformats/qsvg.dll
    .dll windows:4 windows x86 arch:x86

    42986c4683ca635b1511f81d0ea990cf


    Headers

    Imports

    Exports

    Sections

  • libsodium-23.dll
    .dll windows:4 windows x86 arch:x86

    c82aaf4aabb0a6fd6073257386150eea


    Headers

    Imports

    Exports

    Sections

  • libsqlite3-0.dll
    .dll windows:4 windows x86 arch:x86

    4cfb7ae0065ed8f1d5a58963dd8d71d9


    Headers

    Imports

    Exports

    Sections

  • libstdc++-6.dll
    .dll windows:4 windows x86 arch:x86

    3e20eed8bfc96c115d25915428c0cea4


    Headers

    Imports

    Exports

    Sections

  • palettes/Breeze.gpl
  • palettes/DB32.gpl
  • palettes/Grayscale.gpl
  • palettes/Ponies.gpl
  • palettes/Sketching.gpl
  • palettes/Tango.gpl
  • platforms/qwindows.dll
    .dll windows:4 windows x86 arch:x86

    5d33068c9376ece60e82c2dcf381f45f


    Headers

    Imports

    Exports

    Sections