Overview

overview

10

Static

static

10

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    252128128e81ecb5cf4c79eb8fef31fa773994df2a13a626f4c1bc33e991c33c

  • Size

    1.7MB

  • Sample

    240101-ff255seec3

  • MD5

    e3b4b83722d659d4c00b2ee746dbea0d

  • SHA1

    a97e44f8c4f7ce19ef5a08b865e03da5f6c9b50d

  • SHA256

    252128128e81ecb5cf4c79eb8fef31fa773994df2a13a626f4c1bc33e991c33c

  • SHA512

    46d6a70276db93a3c7e97379e2f43681e5e909d136432de76ced035e22d0fca95c0e3e3a6423734a123ad270a27f84cc550e9415d20a69992cfe13719026b334

  • SSDEEP

    24576:rQa+rRep38knZGbO4oFya8ZbRxaiXvnEc3Suvb7sNPwEFfTPCRi4Vz:rZ+rRe3zn4ioa8ZbRMiXO07sNPwERWV

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      252128128e81ecb5cf4c79eb8fef31fa773994df2a13a626f4c1bc33e991c33c

    • Size

      1.7MB

    • MD5

      e3b4b83722d659d4c00b2ee746dbea0d

    • SHA1

      a97e44f8c4f7ce19ef5a08b865e03da5f6c9b50d

    • SHA256

      252128128e81ecb5cf4c79eb8fef31fa773994df2a13a626f4c1bc33e991c33c

    • SHA512

      46d6a70276db93a3c7e97379e2f43681e5e909d136432de76ced035e22d0fca95c0e3e3a6423734a123ad270a27f84cc550e9415d20a69992cfe13719026b334

    • SSDEEP

      24576:rQa+rRep38knZGbO4oFya8ZbRxaiXvnEc3Suvb7sNPwEFfTPCRi4Vz:rZ+rRe3zn4ioa8ZbRMiXO07sNPwERWV

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks