Overview

overview

10

Static

static

10

a6eb2d0e93...74.exe

windows7-x64

10

a6eb2d0e93...74.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a6eb2d0e9381ff6eb2aca7bf1d797774.exe

  • Size

    1.7MB

  • Sample

    240106-kjv88adba7

  • MD5

    a6eb2d0e9381ff6eb2aca7bf1d797774

  • SHA1

    64becc3595f0467f12e2b20bd3a34603fb7e472e

  • SHA256

    10fa07a25654e8027da79c6ce9b04e2d41b68d6c7624f510e8251b4b95fd103e

  • SHA512

    46f60e6d26e1cd6c3a78d842fe5258588623e7fc0dbded7ed1e3bf1baa020fb71dd75f3e77678bb71298cb59171a1150e1847daa20f10b7091724706ad567878

  • SSDEEP

    24576:8s6fQKBl6XngXq9rvXdXwApsgDhhqMWUO9lmRmY7gBgT7muTYpC0M3/biezlI/s:8KRXwATqMW9y5OUJjTzl

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      a6eb2d0e9381ff6eb2aca7bf1d797774.exe

    • Size

      1.7MB

    • MD5

      a6eb2d0e9381ff6eb2aca7bf1d797774

    • SHA1

      64becc3595f0467f12e2b20bd3a34603fb7e472e

    • SHA256

      10fa07a25654e8027da79c6ce9b04e2d41b68d6c7624f510e8251b4b95fd103e

    • SHA512

      46f60e6d26e1cd6c3a78d842fe5258588623e7fc0dbded7ed1e3bf1baa020fb71dd75f3e77678bb71298cb59171a1150e1847daa20f10b7091724706ad567878

    • SSDEEP

      24576:8s6fQKBl6XngXq9rvXdXwApsgDhhqMWUO9lmRmY7gBgT7muTYpC0M3/biezlI/s:8KRXwATqMW9y5OUJjTzl

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks