General
-
Target
tmp
-
Size
5.0MB
-
MD5
0c4bb973e88e0b22652b833aa25f9aae
-
SHA1
10227c55b0b07ce05728416fa61a0062a436ade6
-
SHA256
7b3c1e60932c652fc591de285279cbdfb7292b54899842ea5c627fedc7cee8ab
-
SHA512
1dd23305da37c6a78b9c17328152a179f39d37dd0faff857dcd5ee743bf34af98cb7fff96e4e7ba467ef141cacdc82f34c7816b69e7f34c65a276d71a29b9624
-
SSDEEP
49152:NR7b7Edoz4wYlD2+2cWfGmsQZ0Wf8f8QlWuWzVjnpXGp8mih7NUfXUu4tEqNrqcS:Nye/UUfG/Mul2rq/aReDkizMeQU
Score
10/10
Malware Config
Signatures
-
Detect ZGRat V1 1 IoCs
-
Zgrat family
-
.NET Reactor proctector 1 IoCs
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
tmp
Headers
Sections