Overview

overview

10

Static

static

10

A27231C997...44.exe

windows7-x64

10

A27231C997...44.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    A27231C997680ED04BD67255DF13A244.exe

  • Size

    1.7MB

  • Sample

    240101-hw3gysdfck

  • MD5

    a27231c997680ed04bd67255df13a244

  • SHA1

    735e6ceaeb3c60ed2c840322c14f681b5fa51b08

  • SHA256

    a057dce421f954cd0f7a88bb09a9475526290d702f62fe137a4e07bbc1385592

  • SHA512

    85e5cc5fb95791e559af320c1909e3a1737dea9d624f8d87ef6ab8d06f19dd997a39eb144470098672f57ad6df849f242f90ab9f55a8b92c6f8f70e2a12b064d

  • SSDEEP

    24576:rQa+rRep38knZGbO4oFya8ZbRxaiXvnEc3Suvb7sNPwEFfTPCRi4Vz:rZ+rRe3zn4ioa8ZbRMiXO07sNPwERWV

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      A27231C997680ED04BD67255DF13A244.exe

    • Size

      1.7MB

    • MD5

      a27231c997680ed04bd67255df13a244

    • SHA1

      735e6ceaeb3c60ed2c840322c14f681b5fa51b08

    • SHA256

      a057dce421f954cd0f7a88bb09a9475526290d702f62fe137a4e07bbc1385592

    • SHA512

      85e5cc5fb95791e559af320c1909e3a1737dea9d624f8d87ef6ab8d06f19dd997a39eb144470098672f57ad6df849f242f90ab9f55a8b92c6f8f70e2a12b064d

    • SSDEEP

      24576:rQa+rRep38knZGbO4oFya8ZbRxaiXvnEc3Suvb7sNPwEFfTPCRi4Vz:rZ+rRe3zn4ioa8ZbRMiXO07sNPwERWV

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks