zgrat | 252128128e81ecb5cf4c79eb8fef31fa773994df2a13a626f4c1bc33e991c33c | Triage

Submit
Reports

Overview

overview

Static

static

winprofile

windows7-x64

winprofile

windows10-1703-x64

Sharing

General

Target

252128128e81ecb5cf4c79eb8fef31fa773994df2a13a626f4c1bc33e991c33c
Size

1.7MB
Sample

240101-ff255seec3
MD5

e3b4b83722d659d4c00b2ee746dbea0d
SHA1

a97e44f8c4f7ce19ef5a08b865e03da5f6c9b50d
SHA256

252128128e81ecb5cf4c79eb8fef31fa773994df2a13a626f4c1bc33e991c33c
SHA512

46d6a70276db93a3c7e97379e2f43681e5e909d136432de76ced035e22d0fca95c0e3e3a6423734a123ad270a27f84cc550e9415d20a69992cfe13719026b334
SSDEEP

24576:rQa+rRep38knZGbO4oFya8ZbRxaiXvnEc3Suvb7sNPwEFfTPCRi4Vz:rZ+rRe3zn4ioa8ZbRMiXO07sNPwERWV

Score

10^/10

zgrat rat

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

252128128e81ecb5cf4c79eb8fef31fa773994df2a13a626f4c1bc33e991c33c.exe

Resource

win7-20231215-en

windows7-x64

12 signatures

300 seconds

Behavioral task

behavioral2

Sample

252128128e81ecb5cf4c79eb8fef31fa773994df2a13a626f4c1bc33e991c33c.exe

Resource

win10-20231215-en

windows10-1703-x64

13 signatures

300 seconds

Malware Config

Targets

- Target
  
  252128128e81ecb5cf4c79eb8fef31fa773994df2a13a626f4c1bc33e991c33c
- Size
  
  1.7MB
- MD5
  
  e3b4b83722d659d4c00b2ee746dbea0d
- SHA1
  
  a97e44f8c4f7ce19ef5a08b865e03da5f6c9b50d
- SHA256
  
  252128128e81ecb5cf4c79eb8fef31fa773994df2a13a626f4c1bc33e991c33c
- SHA512
  
  46d6a70276db93a3c7e97379e2f43681e5e909d136432de76ced035e22d0fca95c0e3e3a6423734a123ad270a27f84cc550e9415d20a69992cfe13719026b334
- SSDEEP
  
  24576:rQa+rRep38knZGbO4oFya8ZbRxaiXvnEc3Suvb7sNPwEFfTPCRi4Vz:rZ+rRe3zn4ioa8ZbRMiXO07sNPwERWV
Score

10^/10

zgrat rat
- Detect ZGRat V1
- ZGRat
  ZGRat is remote access trojan written in C#.
  rat zgrat
- Executes dropped EXE
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.