Overview

overview

10

Static

static

3

0727ab0b9d...11.exe

windows7-x64

10

0727ab0b9d...11.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0727ab0b9ded99f5dedfd6203f574111

  • Size

    2.1MB

  • Sample

    231229-3mfxtabbd5

  • MD5

    0727ab0b9ded99f5dedfd6203f574111

  • SHA1

    58eb40d2c4ca79af5e5b6df1f1c441843f8c5b8c

  • SHA256

    4592c4585d662c266a84016c91bd6cea368c51d467a985a22cb14f71f3f5d5c7

  • SHA512

    e38e963246d0ff0842ae9c0a13454699bfb094e57681a3d1de543d279dd0b61f933aa6caf44eff57a20bf8dd8a0afe7ee38da53c074db076329c99b2fd01451d

  • SSDEEP

    49152:A2sffjuMZX0CoAMSe3JTimD/Ymv+gdCrmbBI05ik4G3nvHBFtST:A2szuUF/e3JTVzN+gkKbik4OTs

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      0727ab0b9ded99f5dedfd6203f574111

    • Size

      2.1MB

    • MD5

      0727ab0b9ded99f5dedfd6203f574111

    • SHA1

      58eb40d2c4ca79af5e5b6df1f1c441843f8c5b8c

    • SHA256

      4592c4585d662c266a84016c91bd6cea368c51d467a985a22cb14f71f3f5d5c7

    • SHA512

      e38e963246d0ff0842ae9c0a13454699bfb094e57681a3d1de543d279dd0b61f933aa6caf44eff57a20bf8dd8a0afe7ee38da53c074db076329c99b2fd01451d

    • SSDEEP

      49152:A2sffjuMZX0CoAMSe3JTimD/Ymv+gdCrmbBI05ik4G3nvHBFtST:A2szuUF/e3JTVzN+gkKbik4OTs

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Drops startup file

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks